CVE-2026-8777: Edimax BR-6428NS POST Request formStaDrvSetup command injection
A vulnerability was found in Edimax BR-6428NS 1.10. This issue affects the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component POST Request Handler. Performing a manipulation of the argument stadrvssid results in command injection. The attack can be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Edimax BR-6428NSfrom your environment.If the device cannot be adequately isolated or patched, decommission or replace the device with a model that receives security updates.
- Configuration
Disable remote web administration and any remote management features; restrict web management to LAN-only to prevent remote POST requests to endpoints such as /goform/formStaDrvSetup.
Edimax BR-6428NS web management interface remote_management = disabled / LAN-only - Compensating control
Restrict access to the device management interface at the network perimeter: block external/untrusted networks from reaching the router's web management ports, and allow only trusted IP addresses via firewall rules or ACLs.
- Operational
Monitor vendor advisories for a firmware fix or patch and apply updates as soon as they are released. Until a vendor-supplied fix is available, treat the device as high-risk and limit its network exposure.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8777?
CVE-2026-8777 is considered a high-severity vulnerability due to the potential for command injection.
How do I fix CVE-2026-8777?
To mitigate CVE-2026-8777, upgrade the Edimax BR-6428NS firmware to a version beyond 1.10.
What systems are affected by CVE-2026-8777?
CVE-2026-8777 affects the Edimax BR-6428NS version 1.10 specifically.
What type of vulnerability is CVE-2026-8777?
CVE-2026-8777 is a command injection vulnerability in the POST Request Handler.
What is the impact of CVE-2026-8777?
Exploitation of CVE-2026-8777 can allow attackers to execute arbitrary commands on the affected device.