CVE-2026-9440: Edimax BR-6478AC POST Request formAccept command injection
A vulnerability was identified in Edimax BR-6478AC 1.23. Affected by this vulnerability is the function formAccept of the file /goform/formAccept of the component POST Request Handler. Such manipulation of the argument submit-url leads to command injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Edimax BR-6478ACfrom your environment.If the device cannot be patched or adequately mitigated, remove or replace the affected device from production/critical networks.
- Configuration
Disable remote/web administration (remote management) on the device to prevent remote exploitation of the POST /goform/formAccept handler.
Edimax BR-6478AC web management remote_management = disabled - Compensating control
Block or restrict access to the device management interface from untrusted networks. At the perimeter firewall or WAF, deny external (internet) access to the router's HTTP/HTTPS ports and add rules to block POST requests targeting the path /goform/formAccept or requests that include a submit-url parameter.
- Compensating control
Place the device on an isolated management VLAN and restrict access to trusted administrator IP addresses only until a vendor patch is available.
- Operational
Monitor device logs and network traffic for attempts to exploit POST /goform/formAccept (including manipulation of the submit-url parameter) and respond to any detected intrusion attempts; retain forensic logs for investigation.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9440?
The severity of CVE-2026-9440 is rated as medium with a score of 6.3.
What is the impact of CVE-2026-9440?
CVE-2026-9440 allows for command injection through the function formAccept in the Edimax BR-6478AC.
How do I fix CVE-2026-9440?
To fix CVE-2026-9440, you should update the Edimax BR-6478AC firmware to the latest version provided by the vendor.
Which component is affected by CVE-2026-9440?
CVE-2026-9440 affects the POST Request Handler component of the Edimax BR-6478AC router.
Can CVE-2026-9440 be exploited remotely?
Yes, CVE-2026-9440 can be exploited remotely due to its nature of command injection via POST requests.