CVE-2026-9348: Edimax EW-7438RPn webs mp stack-based overflow
A vulnerability was found in Edimax EW-7438RPn up to 1.31. Affected by this vulnerability is an unknown functionality of the file /goform/mp of the component webs. The manipulation of the argument webs results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Edimax/EW-7438RPnfrom your environment.Remove or isolate affected device(s) from production network (replace with unaffected equipment or take offline) until a vendor-supplied fix is available.
- Configuration
Disable remote management / remote web access to the device's web interface. If remote access is required, restrict it to a small set of trusted IPs.
Edimax EW-7438RPn (webs) remote_management = disabled - Compensating control
Block or filter requests to the /goform/mp endpoint at the network perimeter (firewall, WAF, or reverse proxy). Create ACL/WAF rules to deny requests to /goform/mp and to block requests containing the 'webs' argument or unusually long values for that parameter.
- Operational
Because a public exploit exists, assume potential compromise: inspect device and network logs for exploitation indicators, isolate impacted devices, and rotate administrative credentials and any potentially exposed keys/secrets.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9348?
CVE-2026-9348 has a severity rating of high at 8.8 on the CVSS scale.
How do I fix CVE-2026-9348?
To fix CVE-2026-9348, it is recommended to update the Edimax EW-7438RPn firmware to the latest version.
What type of vulnerability is CVE-2026-9348?
CVE-2026-9348 is identified as a stack-based buffer overflow vulnerability.
Can CVE-2026-9348 be exploited remotely?
Yes, CVE-2026-9348 can be exploited remotely due to its nature as a stack-based buffer overflow.
What component is affected by CVE-2026-9348?
CVE-2026-9348 affects the webs functionality of the Edimax EW-7438RPn device.