CVE-2026-9400: Edimax BR-6675nD POST Request formUSBStorage command injection

Published May 24, 2026

Updated

A flaw has been found in Edimax BR-6675nD 1.12. This issue affects the function formUSBStorage of the file /goform/formUSBStorage of the component POST Request Handler. Executing a manipulation of the argument subdir can lead to command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

1 affected component

Edimax BR-6675nD=1.12

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Remove
Remove Edimax BR-6675nD from your environment.
If you cannot disable USB storage or adequately restrict network access, remove the affected device from production networks (disconnect/uninstall/replace) until a vendor patch or other safe remediation is available.
Configuration
Disable USB storage support or any USB-related services/features on the Edimax BR-6675nD to prevent invocation of the /goform/formUSBStorage POST handler.
Edimax BR-6675nD (formUSBStorage / USB storage) formUSBStorage / USB storage handling = disabled
Compensating control
Block or restrict access to the device management interface and the /goform/formUSBStorage endpoint from untrusted networks. Enforce access restrictions via firewall rules, network segmentation, or a WAF so only trusted IPs (e.g., internal admin network) can reach the device.
Operational
If the device is running Edimax BR-6675nD version 1.12, isolate it from untrusted and internet-facing networks until a vendor fix is available. Monitor vendor advisories and apply any vendor-supplied firmware update as soon as it is released.

Event History

May 24, 2026

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·11:16 PM

DescriptionSeverityWeakness

Apr 28, 58520

Event

via FIRST·11:27 AM

Frequently Asked Questions

What is the severity of CVE-2026-9400?

CVE-2026-9400 has a medium severity level with a score of 6.3.

How do I fix CVE-2026-9400?

To fix CVE-2026-9400, update the Edimax BR-6675nD firmware to the latest version provided by the manufacturer.

What type of vulnerability is CVE-2026-9400?

CVE-2026-9400 is classified as a command injection vulnerability.

Can CVE-2026-9400 be exploited remotely?

Yes, CVE-2026-9400 can be exploited remotely through a vulnerable POST Request Handler.

What component of the Edimax BR-6675nD is affected by CVE-2026-9400?

CVE-2026-9400 affects the formUSBStorage function in the POST Request Handler of the Edimax BR-6675nD.