CVE-2026-9479
Received Received - Intake
Stack-Based Buffer Overflow in Edimax EW-7438RPn Router

Publication date: 2026-05-25

Last updated on: 2026-05-25

Assigner: VulDB

Description
A security vulnerability has been detected in Edimax EW-7438RPn 1.31. The affected element is the function formLogout of the file /goform/formLogout. The manipulation of the argument submit-url leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-05-25
Last Modified
2026-05-25
Generated
2026-05-26
AI Q&A
2026-05-26
EPSS Evaluated
N/A
NVD
EUVD
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
edimax ew-7438rpn 1.31
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability exists in the Edimax EW-7438RPn device, specifically in the function formLogout within the file /goform/formLogout. It involves a stack-based buffer overflow caused by manipulation of the argument submit-url. This flaw can be exploited remotely.


How can this vulnerability impact me? :

Exploitation of this vulnerability can lead to severe consequences such as unauthorized remote code execution or system compromise due to the stack-based buffer overflow. This could allow attackers to take control of the affected device or disrupt its normal operation.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart