CVE-2026-9460: Edimax EW-7438RPn formAccept stack-based overflow
A weakness has been identified in Edimax EW-7438RPn 1.31. This impacts the function formAccept of the file /goform/formAccept. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Edimax EW-7438RPn 1.31from your environment.If the device is not required or cannot be secured, remove or disconnect the affected device from the network and replace it with a non-vulnerable alternative.
- Compensating control
Block or restrict remote access to the Edimax device: disable remote/remote-management access, apply firewall/ACL rules to block incoming connections from untrusted networks, and isolate the device from the Internet until a vendor fix is available.
- Operational
Monitor network and device logs for exploitation indicators (including requests to /goform/formAccept or other unexpected activity). If compromise is suspected, disconnect the device, perform recovery actions such as factory reset or replacement, and investigate the incident.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9460?
CVE-2026-9460 has a severity rating of 8.8, which is classified as high.
How do I fix CVE-2026-9460?
To fix CVE-2026-9460, update the Edimax EW-7438RPn firmware to the latest version provided by the manufacturer.
What type of vulnerability is CVE-2026-9460?
CVE-2026-9460 is classified as a stack-based buffer overflow vulnerability.
Can CVE-2026-9460 be exploited remotely?
Yes, CVE-2026-9460 can be exploited remotely through manipulation of the submit-url argument.
What software is affected by CVE-2026-9460?
CVE-2026-9460 affects the Edimax EW-7438RPn firmware version 1.31.