CVE-2026-100745
Received Received - Intake

Stack-Based Buffer Overflow in Edimax BR-6428nC

Publication date: 2026-09-27

Last updated on: 2026-09-27

Assigner: VulDB

Description
A vulnerability has been found in Edimax BR-6428nC 1.16. The impacted element is an unknown function of the file /goform/formWizSurvey of the component Wireless Wizard Handler. The manipulation of the argument interface1/interface2 leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-27
Last Modified
2026-09-27
Generated
2026-09-27
AI Q&A
2026-09-27
EPSS Evaluated
N/A
NVD
CVE-2026-100745
EUVD
EUVD-2026-87833

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
edimax br-6428nc 1.16

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a stack-based buffer overflow in the Edimax BR-6428nC router version 1.16. It exists in the Wireless Wizard Handler component, specifically in the /goform/formWizSurvey file. The issue is triggered by manipulating the interface1 or interface2 arguments, which can lead to a buffer overflow. This flaw can be exploited remotely, and a public exploit is already available.

Impact Analysis

If exploited, this vulnerability could allow an attacker to execute arbitrary code on the affected router. This may result in unauthorized access, data theft, or disruption of network services. Attackers could potentially take control of the device, monitor network traffic, or launch further attacks from the compromised router.

Compliance Impact

The provided CVE data does not specify direct impacts on compliance with GDPR, HIPAA, or other standards. The vulnerability involves a stack-based buffer overflow in Edimax BR-6428nC firmware, which could potentially allow remote code execution or denial of service. Such issues may lead to unauthorized access or data breaches, which could indirectly affect compliance if sensitive data is exposed.

Mitigation Strategies

Immediately update the Edimax BR-6428nC firmware to the latest version to patch the stack-based buffer overflow vulnerability in the Wireless Wizard Handler component. Disable remote access to the device if not required and restrict network access to the management interface.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-100745. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart