CVE-2026-100745
Edimax BR-6428nC Wireless Wizard formWizSurvey stack-based overflow
Edimax BR-6428nC
CVSS
5.3MediumExploitationPublic exploit codeCISA's assessment says proof of concept code is public, assessed 28 Sep 2026. Not in the KEV catalogCISA via CVE List
Exploit odds (EPSS)0.31%Chance of exploitation activity in the next 30 days, higher than 22% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
A vulnerability has been found in Edimax BR-6428nC 1.16. The impacted element is an unknown function of the file /goform/formWizSurvey of the component Wireless Wizard Handler. The manipulation of the argument interface1/interface2 leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
Text from CVE List
Affected versions 1
- BR-6428nCaffected: 1.16CVE List
References 5
- vuldb.com/cve/CVE-2026-100745Advisoryvia CVE List
- vuldb.com/submit/906337Advisoryvia CVE List
- tzh00203.notion.site/Edimax-BR-6428nC-formWizSurvey-Interface-Stack-Overflow-33db5c52018a80b5b950feb29846006cExploitvia CVE List
- vuldb.com/vuln/410616Referencevia CVE List
- vuldb.com/vuln/410616/ctiReferencevia CVE List