Skip to main content

Edimax BR-6208AC CVE-2026-7685

| EUVD-2026-26823 HIGH
Classic Buffer Overflow (CWE-120)
2026-05-03 VulDB
7.4
CVSS 4.0
Share

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

6
Analysis Generated
May 03, 2026 - 07:40 vuln.today
CVSS changed
May 03, 2026 - 07:22 NVD
8.8 (HIGH) 7.4 (HIGH)
PoC Detected
May 03, 2026 - 07:16 vuln.today
Public exploit code
EUVD ID Assigned
May 03, 2026 - 07:15 euvd
EUVD-2026-26823
Analysis Generated
May 03, 2026 - 07:15 vuln.today
CVE Published
May 03, 2026 - 07:00 nvd
HIGH 7.4

DescriptionNVD

A vulnerability was detected in Edimax BR-6208AC up to 1.02. Affected is an unknown function of the file /goform/setWAN. Performing a manipulation of the argument pptpDfGateway  results in buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Buffer overflow in Edimax BR-6208AC router firmware version 1.02 allows authenticated remote attackers to achieve complete system compromise via crafted pptpDfGateway parameter to /goform/setWAN endpoint. Public exploit code exists (EPSS probability unknown, not in CISA KEV). …

Sign in for full analysis, threat intelligence, and remediation guidance.

RemediationAI

Within 24 hours: Inventory all Edimax BR-6208AC devices running firmware 1.02 in your environment and document their network exposure and criticality. Within 7 days: Isolate affected routers from production networks or restrict management interface access to a dedicated administrative VLAN with strict ingress controls; contact Edimax support to confirm end-of-life status and request security updates. …

Sign in for detailed remediation steps.

Share

CVE-2026-7685 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy