Skip to main content

Edimax BR-6428nC CVE-2026-7684

| EUVD-2026-26822 HIGH
Classic Buffer Overflow (CWE-120)
2026-05-03 VulDB
7.4
CVSS 4.0
Share

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

6
Analysis Generated
May 03, 2026 - 07:40 vuln.today
CVSS changed
May 03, 2026 - 07:22 NVD
8.8 (HIGH) 7.4 (HIGH)
PoC Detected
May 03, 2026 - 07:16 vuln.today
Public exploit code
EUVD ID Assigned
May 03, 2026 - 07:15 euvd
EUVD-2026-26822
Analysis Generated
May 03, 2026 - 07:15 vuln.today
CVE Published
May 03, 2026 - 06:45 nvd
HIGH 7.4

DescriptionNVD

A security vulnerability has been detected in Edimax BR-6428nC up to 1.16. This impacts an unknown function of the file /goform/setWAN. Such manipulation of the argument pptpDfGateway  leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Buffer overflow in Edimax BR-6428nC router firmware (version 1.16 and earlier) allows authenticated remote attackers to execute arbitrary code via crafted pptpDfGateway parameter in the /goform/setWAN endpoint. A public proof-of-concept exploit exists demonstrating stack overflow exploitation. …

Sign in for full analysis, threat intelligence, and remediation guidance.

RemediationAI

Within 24 hours: Identify and inventory all Edimax BR-6428nC routers in production; check firmware version via device admin interface. Within 7 days: If firmware update becomes available, prioritize deployment to production devices; until then, implement network segmentation to restrict administrative access to these devices to trusted networks only, and change default credentials immediately. …

Sign in for detailed remediation steps.

Share

CVE-2026-7684 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy