Which versions of Edimax BR-6675nD are affected by EUVD-2026-31605?

An unpatched vulnerability in Edimax BR-6675nD wireless routers (version 1.12) poses potential code execution risk to network infrastructure.

Is there a public PoC exploit available for EUVD-2026-31605?

Yes, a public proof-of-concept exploit is available for EUVD-2026-31605. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate EUVD-2026-31605?

Within 24 hours: Inventory all Edimax BR-6675nD devices running version 1.12 and document their role in network operations. Within 7 days: Implement access controls by restricting router management to internal-only networks, enforcing strong credentials, and disabling remote administration where feasible. Within 30 days: Initiate procurement of replacement routers from vendors with active security patch cycles and establish migration timeline within 90 days.

Edimax BR-6675nD EUVD-2026-31605

Q: What is the CVSS score of EUVD-2026-31605?

EUVD-2026-31605 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-9403 HIGH

Classic Buffer Overflow (CWE-120)

2026-05-24 VulDB

GHSA-69c3-9259-5w7w

Buffer Overflow Br 6675Nd

7.4

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulDB) · only source for this CVE.

CVSS VectorVendor: VulDB

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jun 08, 2026 - 09:50 vuln.today

CVSS changed

May 26, 2026 - 19:37 NVD

8.8 (HIGH) 7.4 (HIGH)

DescriptionCVE.org

A vulnerability was determined in Edimax BR-6675nD 1.12. The impacted element is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey of the component POST Request Handler. This manipulation of the argument selSSID causes buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Stack/heap buffer overflow in the Edimax BR-6675nD 1.12 wireless router allows authenticated remote attackers to corrupt memory by sending a crafted POST request with an oversized selSSID parameter to /goform/formWlSiteSurvey, potentially achieving code execution on the device. Publicly available exploit code exists (disclosed by VulDB), and the vendor was contacted early but did not respond, leaving the device without an official fix. EPSS probability is low (0.04%, 13th percentile) and the issue is not listed in CISA KEV.

Technical ContextAI

The BR-6675nD is a consumer/SOHO 802.11n wireless router. The vulnerable code path is in the embedded web administration interface - specifically the formWlSiteSurvey handler reached via /goform/formWlSiteSurvey, a CGI-style endpoint typical of Realtek/Broadcom-based router firmware. The root cause maps to CWE-120 (classic buffer copy without checking input size), where the selSSID POST argument is copied into a fixed-size buffer without bounds validation, enabling stack or BSS memory corruption. CPE data confirms the single affected product as cpe:2.3:a:edimax:br-6675nd, with EUVD scoping the vulnerable build to firmware 1.12.

RemediationAI

No vendor-released patch identified at time of analysis - Edimax did not respond to the disclosure. As compensating controls, restrict the router's web administration interface to trusted LAN segments only and explicitly disable Remote/WAN management (this prevents internet-borne exploitation but blocks legitimate remote admin), change default administrator credentials to long random values to make the PR:L precondition meaningfully harder, and block external access to TCP 80/443 on the WAN interface at any upstream firewall. Filter or drop POST requests to /goform/formWlSiteSurvey at any in-line WAF or reverse proxy if one is deployed (side effect: legitimate wireless site-survey scans from the admin UI will fail). Given the BR-6675nD is an older 802.11n device with an unresponsive vendor, the most durable mitigation is to replace the device with a currently-supported router. Reference: VulDB advisory at https://vuldb.com/vuln/365384 and the public PoC writeup at https://lavender-bicycle-a5a.notion.site/EDIMAX-BR-6675nD-formWlSiteSurvey-34b53a41781f80608091f104f17e1e9b.