CVE-2026-8776
Received Received - Intake
Buffer Overflow in Edimax BR-6428NS Router

Publication date: 2026-05-18

Last updated on: 2026-05-18

Assigner: VulDB

Description
A vulnerability has been found in Edimax BR-6428NS 1.10. This vulnerability affects the function formPPTPSetup of the file /goform/formPPTPSetup of the component POST Request Handler. Such manipulation of the argument pptpUserName leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-05-18
Last Modified
2026-05-18
Generated
2026-06-10
AI Q&A
2026-05-18
EPSS Evaluated
2026-06-08
NVD
CVE-2026-8776
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
edimax br-6428ns 1.10
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-120 The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in the Edimax BR-6428NS device, specifically in the function formPPTPSetup within the POST Request Handler component. It involves manipulation of the argument pptpUserName, which leads to a buffer overflow condition. This means that an attacker can send specially crafted data remotely to overflow the buffer, potentially causing unexpected behavior or allowing execution of malicious code.

Impact Analysis

The vulnerability can be exploited remotely without user interaction, allowing an attacker to cause a buffer overflow. This can lead to severe impacts such as unauthorized code execution, system crashes, or denial of service. Given the high CVSS scores, the impact includes high confidentiality, integrity, and availability risks.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-8776. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart