CVE-2026-9427: Edimax EW-7438RPn webs formWlSiteSurvey stack-based overflow
A flaw has been found in Edimax EW-7438RPn 1.31. This impacts the function formWlSiteSurvey of the file /goform/formWlSiteSurvey of the component webs. This manipulation of the argument selSSID/submit-url causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Edimax EW-7438RPnfrom your environment.If the device cannot be adequately isolated or managed securely, remove or disconnect the device from the network until an official fix is released.
- Configuration
Disable remote/WAN web management and any remote administration features; restrict web/management access to local/trusted networks only.
Edimax EW-7438RPn web management (webs) remote_management / web admin access = disabled - Compensating control
Block access to the device's management interface from untrusted networks using firewall rules or ACLs, and place the device on an isolated management VLAN or network segment until a vendor patch is available.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9427?
CVE-2026-9427 has a severity rating of high, assessed at 8.8 on the CVSS scale.
How do I fix CVE-2026-9427?
To remediate CVE-2026-9427, it is recommended to update to the latest firmware version provided by Edimax for the EW-7438RPn device.
What component is affected by CVE-2026-9427?
CVE-2026-9427 affects the webs component of the Edimax EW-7438RPn device, specifically the function formWlSiteSurvey.
What type of vulnerability is CVE-2026-9427?
CVE-2026-9427 is categorized as a stack-based buffer overflow vulnerability.
Can CVE-2026-9427 be exploited remotely?
Yes, CVE-2026-9427 can be exploited remotely by manipulating the argument selSSID/submit-url.