CVE-2026-10125

HIGH

Edimax BR-6478AC POST Request formPPPoESetup stack-based overflow

Title source: cna
STIX 2.1

Description

A vulnerability was identified in Edimax BR-6478AC 1.23. Affected by this vulnerability is the function formPPPoESetup of the file /goform/formPPPoESetup of the component POST Request Handler. The manipulation of the argument pppUserName leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used.

References (4)

Core 4
Core References
Vdb Entry, Technical Description vdb-entry technical-description
VDB-367302 | Edimax BR-6478AC POST Request formPPPoESetup stack-based overflow
https://vuldb.com/vuln/367302
Signature, Permissions Required signature permissions-required
VDB-367302 | CTI Indicators (IOB, IOC, IOA)
https://vuldb.com/vuln/367302/cti
Third Party Advisory third-party-advisory
Submit #818453 | Edimax BR6478ACV2 BR6478ACV2_v1.23 Buffer Overflow
https://vuldb.com/submit/818453

Scores

CVSS v3 8.8
EPSS 0.0045
EPSS Percentile 35.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-119 CWE-121
Status published
Products (1)
Edimax/BR-6478AC 1.23
Published May 30, 2026
Tracked Since May 30, 2026