EUVD-2026-31528
GHSA-qc2w-vjr4-c222
CVSS VectorNVD
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
3DescriptionNVD
A security flaw has been discovered in Edimax BR-6428NS 1.10. This affects the function formWirelessTbl of the file /goform/formWirelessTbl of the component POST Request Handler. Performing a manipulation of the argument vapurl results in buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
AnalysisAI
Buffer overflow in the Edimax BR-6428NS 1.10 router's web management interface allows authenticated remote attackers to corrupt memory by submitting a crafted vapurl parameter to the formWirelessTbl POST handler at /goform/formWirelessTbl. Publicly available exploit code exists (released via VulDB and a Notion writeup), and the vendor has not responded to coordinated disclosure attempts. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
24 hours: Audit all Edimax BR-6428NS devices to confirm which run firmware version 1.10, then map instances facing network exposure or untrusted user access. 7 days: For v1.10 devices still in use, restrict management interface access via firewall ACLs to block internet-facing exposure, disable remote management features, and require VPN authentication for all administrative access. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today