2
CVEs
0
Critical
0
High
0
KEV
2
PoC
0
Unpatched C/H
0.0%
Patch Rate
2.1%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
0
MEDIUM
0
LOW
2
Monthly CVE Trend
Affected Products (28)
Ew 7438Rpn
24
Br 6675Nd
12
Br 6478Ac
10
Re11S Firmware
8
Br 6478ac V3 Firmware
8
Ew 7478Apc
7
Ew 7438rpn Mini Firmware
7
Br 6428Ns
7
Br 6208ac Firmware
6
Br 6476Ac Firmware
5
Br 6478Ac V2
5
Br 6208Ac V1 Firmware
3
Br 6288Acl Firmware
3
Br 6428Ns Firmware
3
Ic 3140W Firmware
3
Br 6214K
2
Ic 5150W Firmware
2
Br 6208Ac
2
Br 6428Nc
2
Open Redirect
2
Ic 6220Dc Firmware
2
Br 6473Ax Firmware
1
Ic 7100 Firmware
1
Cv 7428Ns Firmware
1
Edimax Ew 7438Rpn V2 Firmware
1
Br 6228Nc
1
Ic 3116W Firmware
1
Br 6258N Firmware
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-82702 | OS command injection in Edimax BR-6214K firmware version 1.40 allows a remote authenticated administrator to execute arbitrary operating system commands by supplying a crafted value to the ateFunc parameter of the wlanMP.asp endpoint, which passes it unsanitized to a system() call. A public proof-of-concept exploit is available on GitHub, lowering the skill barrier for post-authentication exploitation. No vendor patch exists and the vendor did not respond to disclosure; no CISA KEV listing means active exploitation has not been confirmed by US government sources, though the unpatched status combined with public PoC availability elevates near-term risk. | LOW | 2.0 | 2.1% | 30 |
PoC
No patch
|
| CVE-2026-82703 | OS command injection in Edimax BR-6214K firmware 1.40 allows an authenticated administrator to execute arbitrary commands on the router's underlying embedded OS by supplying shell metacharacters in the `pingstr` argument of the `asp_setPing` web endpoint. A public proof-of-concept exploit has been released on GitHub, and the vendor has not responded to disclosure nor issued a patch. Despite the low CVSS 4.0 score of 2.0 - driven entirely by the PR:H authentication requirement - successful exploitation yields root-level command execution on the device, making the practical impact significantly higher than the score suggests for any attacker who already possesses admin credentials. | LOW | 2.0 | 2.1% | 30 |
PoC
No patch
|