CVE-2026-9361: Edimax EW-7438RPn POST Request formAccep formAccept command injection
A weakness has been identified in Edimax EW-7438RPn 1.12. This affects the function formAccept of the file /goform/formAccep of the component POST Request Handler. This manipulation of the argument submit-url causes command injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Block or restrict remote/WAN access to the Edimax EW-7438RPn management interface. At the network perimeter, firewall or ACLs should deny inbound access from the Internet to the device; allow management only from trusted internal IPs.
- Compensating control
Place the device on a segmented management VLAN or isolate it from other networks to limit exposure and reduce potential lateral movement if exploited.
- Operational
Monitor device logs and network traffic for POST requests targeting /goform/formAccep or other unexpected POST requests to the formAccept handler; if suspicious activity is observed, disconnect the device from the network for investigation.
- Operational
Track vendor advisories for this model and apply any vendor-supplied firmware updates or patches when they become available. If no patch is released, consider replacing the device with a model that receives security updates.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9361?
The severity of CVE-2026-9361 is classified as medium with a score of 6.3.
How do I fix CVE-2026-9361?
To fix CVE-2026-9361, update the Edimax EW-7438RPn firmware to the latest version provided by Edimax.
What type of vulnerability is CVE-2026-9361?
CVE-2026-9361 is a command injection vulnerability.
Can CVE-2026-9361 be exploited remotely?
Yes, CVE-2026-9361 can be exploited remotely due to its nature of being a command injection vulnerability.
What component is affected by CVE-2026-9361?
CVE-2026-9361 affects the POST Request Handler function formAccept in the Edimax EW-7438RPn.