CVE-2026-9403: Edimax BR-6675nD POST Request formWlSiteSurvey buffer overflow
A vulnerability was determined in Edimax BR-6675nD 1.12. The impacted element is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey of the component POST Request Handler. This manipulation of the argument selSSID causes buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Edimax BR-6675nD 1.12from your environment.If the device cannot be mitigated or secured, remove or disconnect the affected Edimax BR-6675nD 1.12 device from networks (especially from WAN/internet access) until a vendor fix or replacement is available.
- Configuration
If possible, disable the wireless site survey feature or otherwise disable or restrict access to the formWlSiteSurvey POST handler (the /goform/formWlSiteSurvey endpoint) and disable remote management to prevent remote POST requests to this handler.
Edimax BR-6675nD POST Request Handler (formWlSiteSurvey) access_to_formWlSiteSurvey = disable/restrict - Compensating control
Block or filter POST requests to /goform/formWlSiteSurvey at the network edge (WAF, reverse proxy, firewall) and restrict access to the device's management interfaces to trusted IPs only.
- Operational
Monitor logs for attempts to POST to /goform/formWlSiteSurvey, isolate any device showing suspicious activity, perform forensic analysis if compromise is suspected, and rotate any credentials used on the device or related systems.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9403?
The severity of CVE-2026-9403 is rated as high with a score of 8.8.
How do I fix CVE-2026-9403?
To address CVE-2026-9403, update the firmware of the Edimax BR-6675nD to the latest version provided by the manufacturer.
What is the impact of CVE-2026-9403?
CVE-2026-9403 allows for a buffer overflow that can potentially be exploited remotely, leading to unauthorized access and control over the device.
Who is affected by CVE-2026-9403?
CVE-2026-9403 affects users of the Edimax BR-6675nD router with firmware version 1.12.
What type of vulnerability is CVE-2026-9403?
CVE-2026-9403 is categorized as a buffer overflow vulnerability.