Which versions of Edimax EW-7438RPn are affected by CVE-2026-9345?

Edimax EW-7438RPn WiFi range extender firmware versions up to 1.31 contain a high-severity buffer overflow vulnerability that allows authenticated attackers to execute arbitrary code on affected…

Is there a public PoC exploit available for CVE-2026-9345?

Yes, a public proof-of-concept exploit is available for CVE-2026-9345. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-9345?

Within 24 hours: Inventory all Edimax EW-7438RPn devices in your environment and document current firmware versions. Within 7 days: Isolate affected devices (firmware ≤1.31) to segregated networks if possible, implement network access controls restricting configuration interface access to authorized administrators only, and monitor device logs for suspicious configuration parameter submissions. Within 30 days: Contact Edimax support for patch availability timeline, evaluate replacement with certified enterprise-grade access points, and implement compensating controls (network segmentation, authentication hardening on management interfaces).

Edimax EW-7438RPn CVE-2026-9345

Q: What is the CVSS score of CVE-2026-9345?

CVE-2026-9345 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-31555 HIGH

Classic Buffer Overflow (CWE-120)

2026-05-24 VulDB

GHSA-r23w-53vr-mr47

Buffer Overflow Ew 7438Rpn

7.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Re-analysis Queued

May 26, 2026 - 19:37 vuln.today

cvss_changed

CVSS changed

May 26, 2026 - 19:37 NVD

8.8 (HIGH) 7.4 (HIGH)

Analysis Generated

May 24, 2026 - 01:45 vuln.today

DescriptionCVE.org

A vulnerability was detected in Edimax EW-7438RPn up to 1.31. This affects the function formWizSurvey of the file /goform/formWizSurvey of the component webs. Performing a manipulation of the argument ssid/manualssid/ip/mask/gateway results in buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Buffer overflow in Edimax EW-7438RPn WiFi range extender firmware versions up to 1.31 enables authenticated remote attackers to execute arbitrary code by sending malformed parameters to the device configuration interface. The vulnerability affects the formWizSurvey function in /goform/formWizSurvey when processing ssid, manualssid, ip, mask, or gateway parameters, with publicly available exploit code existing on GitHub.

Technical ContextAI

The Edimax EW-7438RPn is a WiFi range extender/repeater device. The vulnerability is a classic buffer overflow (CWE-120) in the web server component (webs) that handles device configuration. When the formWizSurvey function processes network configuration parameters during the setup wizard, it fails to properly validate input length before copying data to fixed-size buffers. The affected CPE identifier cpe:2.3:a:edimax:ew-7438rpn:*:*:*:*:*:*:*:* indicates all versions are potentially affected, though the description specifically mentions versions up to 1.31.

RemediationAI

No vendor-released patch identified at time of analysis. The vendor was contacted but did not respond to the disclosure. As immediate compensating controls, restrict network access to the device's web interface to trusted IP addresses only, ensure strong non-default credentials are configured, and consider placing the device behind a firewall that blocks external access to the management interface. Monitor for suspicious POST requests to /goform/formWizSurvey containing oversized parameter values. Consider replacing the device with a supported alternative if the vendor continues to be unresponsive.