CVE-2026-9482: Edimax EW-7438RPn formSDHCP stack-based overflow
A vulnerability has been found in Edimax EW-7438RPn 1.31. This impacts the function formSDHCP of the file /goform/formSDHCP. Such manipulation of the argument submit-url leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Edimax EW-7438RPnfrom your environment.If the device cannot be isolated or mitigated, disconnect or replace the device until a vendor firmware fix is available.
- Configuration
Disable remote/ WAN web administration on the device (disable remote management) and, if available, restrict web management to the LAN or localhost only.
Edimax EW-7438RPn web management remote_management = disabled - Compensating control
Apply network controls to prevent remote access to the device: block/deny HTTP(S) and management-port access to the device from untrusted networks (WAN) at the perimeter firewall, restrict administration access to trusted IPs or via VPN, and isolate the device on a management VLAN.
- Operational
Monitor the device for signs of compromise and suspicious activity. If compromise is suspected, power off or isolate the device, perform a factory reset or replace it, and rotate any credentials that may have been used to administer connected services.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9482?
CVE-2026-9482 has a high severity score of 8.8.
How do I fix CVE-2026-9482?
To fix CVE-2026-9482, update the Edimax EW-7438RPn device to the latest available firmware that addresses this buffer overflow vulnerability.
What type of vulnerability is CVE-2026-9482?
CVE-2026-9482 is classified as a stack-based buffer overflow vulnerability.
Can CVE-2026-9482 be exploited remotely?
Yes, CVE-2026-9482 can be exploited remotely due to its design allowing manipulation of the submit-url argument.
What impact does CVE-2026-9482 have on the Edimax EW-7438RPn?
CVE-2026-9482 may allow an attacker to execute arbitrary code on the Edimax EW-7438RPn device.