CVE-2026-19960

Received Received - Intake

Command Injection in Edimax EW-7478APC Firmware

Publication date: 2026-08-16

Last updated on: 2026-08-16

Assigner: VulDB

Description

A security vulnerability has been detected in Edimax EW-7478APC 1.04. This impacts the function formWlbasic of the file /goform/formWlbasic. Such manipulation of the argument rootAPmac leads to command injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-16

Last Modified

2026-08-16

Generated

2026-08-17

AI Q&A

2026-08-17

EPSS Evaluated

N/A

NVD

CVE-2026-19960

EUVD

EUVD-2026-60001

Affected Vendors & Products

Vendor	Product	Version / Range
edimax	ew-7478apc	1.04

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-77	The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
CWE-74	The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This vulnerability is a command injection flaw in the Edimax EW-7478APC device version 1.04. It exists in the formWlbasic function within the /goform/formWlbasic file. An attacker can exploit this by manipulating the rootAPmac argument to inject and execute arbitrary commands remotely. The issue was publicly disclosed and the vendor did not respond to the disclosure.

Detection Guidance

Detecting this vulnerability requires checking for Edimax EW-7478APC devices with firmware version 1.04. Scan your network for devices with the CPE edimax ew-7478apc. Inspect web interface access logs for suspicious formWlbasic POST requests targeting /goform/formWlbasic with rootAPmac parameter manipulation.

Impact Analysis

If you use the affected Edimax EW-7478APC device, an attacker could remotely execute commands on your device. This may allow unauthorized access, data theft, or disruption of device functionality. The impact depends on the device's role in your network and the commands executed.

Compliance Impact

This vulnerability involves command injection in Edimax EW-7478APC, allowing remote attackers to execute arbitrary commands. Such unauthorized access could lead to data breaches, unauthorized data access, or manipulation, which may violate GDPR (data protection) and HIPAA (health data security) requirements for confidentiality and integrity.

Mitigation Strategies

Immediately isolate affected Edimax EW-7478APC devices from your network. Disable remote access to the web interface if possible. Contact Edimax support for firmware updates or patches. Monitor network traffic for unusual activity related to the vulnerable endpoint.

Hi! I’m here to help you understand CVE-2026-19960. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70