CVE-2026-9423: Edimax BR-6675nD POST Request mp command injection
A security flaw has been discovered in Edimax BR-6675nD 1.12. Impacted is the function mp of the file /goform/mp of the component POST Request Handler. Performing a manipulation of the argument command results in command injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9423?
The severity of CVE-2026-9423 is rated as medium with a score of 4.7.
How do I fix CVE-2026-9423?
To fix CVE-2026-9423, apply the latest firmware update provided by Edimax for the BR-6675nD device.
What type of vulnerability is CVE-2026-9423?
CVE-2026-9423 is a command injection vulnerability that can be exploited remotely.
What is affected by CVE-2026-9423?
CVE-2026-9423 affects the mp function of the /goform/mp file in Edimax BR-6675nD devices.
Can CVE-2026-9423 be exploited remotely?
Yes, CVE-2026-9423 can be exploited remotely through the manipulation of the command argument in a POST request.