Which versions of Edimax BR-6675nD are affected by CVE-2026-9381?

A memory corruption vulnerability (CVE-2026-9381, CVSS 7.4) in the Edimax BR-6675nD wireless router affects organizations relying on this gateway for network and perimeter security services.

Is there a public PoC exploit available for CVE-2026-9381?

Yes, a public proof-of-concept exploit is available for CVE-2026-9381. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-9381?

Within 24 hours: Conduct full inventory of Edimax BR-6675nD routers via asset management system; restrict administrative access to these devices to authorized personnel only and relocate management access to an isolated network segment. Immediately enable verbose logging and configure alerts for any requests to the /goform/formPPPoESetup endpoint. Within 7 days: Check Edimax support for any available firmware versions and deploy if present; implement network-based intrusion detection/prevention (IDS/IPS) signatures for CVE-2026-9381; initiate procurement of alternative gateway hardware from active vendors with current security support (Cisco, Ubiquiti, Fortinet equivalent models). Within 30 days: Complete replacement of all Edimax BR-6675nD units with approved alternative router models from supported vendors; retire affected hardware from production; conduct comprehensive log analysis of affected devices for evidence of exploitation attempts during vulnerability window.

Edimax BR-6675nD CVE-2026-9381

Q: What is the CVSS score of CVE-2026-9381?

CVE-2026-9381 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-31591 HIGH

Classic Buffer Overflow (CWE-120)

2026-05-24 VulDB

GHSA-rw38-jf8v-3hg8

Buffer Overflow Br 6675Nd

7.4

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulDB) · only source for this CVE.

CVSS VectorVendor: VulDB

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jun 08, 2026 - 09:24 vuln.today

CVSS changed

May 26, 2026 - 19:37 NVD

8.8 (HIGH) 7.4 (HIGH)

DescriptionCVE.org

A vulnerability was detected in Edimax BR-6675nD 1.12. Affected by this vulnerability is the function formPPPoESetup of the file /goform/formPPPoESetup of the component POST Request Handler. Performing a manipulation of the argument pppUserName results in buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Buffer overflow in the Edimax BR-6675nD 1.12 wireless router allows remote attackers to corrupt memory by sending a malicious pppUserName parameter to the /goform/formPPPoESetup endpoint. Publicly available exploit code exists, raising the risk of opportunistic targeting despite a low EPSS score of 0.04%, and the vendor has not responded to coordinated disclosure attempts.

Technical ContextAI

The flaw resides in the formPPPoESetup CGI handler exposed via the router's HTTP management interface (/goform/formPPPoESetup), which processes PPPoE configuration POST requests. According to CWE-120 (Classic Buffer Copy without Checking Size of Input), the pppUserName argument is copied into a fixed-size stack or heap buffer without bounds checking, allowing oversized input to overwrite adjacent memory. The affected CPE cpe:2.3:a:edimax:br-6675nd represents a consumer/SOHO wireless broadband router, typical of the embedded MIPS/ARM Linux platforms where such goform handlers in the boa/httpd web server commonly suffer from unchecked strcpy/sprintf patterns.

RemediationAI

No vendor-released patch identified at time of analysis - the vendor was contacted early about this disclosure but did not respond. Owners of the BR-6675nD should treat this device as end-of-support and replace it with a currently supported router; until replacement, restrict access to the web management interface to trusted LAN hosts only by disabling remote/WAN administration (this prevents internet-based exploitation but does not block a malicious LAN-side authenticated user), change the admin password from defaults to reduce the chance of an attacker meeting the PR:L precondition, and segment the router off any sensitive internal networks. Monitor the Edimax support site and vendor advisory at https://nvd.nist.gov/vuln/detail/CVE-2026-9381 for any future firmware update.