CVE-2026-36734

EDIMAX BR-6428nS V3 1.15 is vulnerable to Command Injection

High · published May 11, 2026

CVSS v3.1
8.8
EPSS
2%
Percentile
82.2
In the wild
Unconfirmed
What it is

EDIMAX BR-6428nS V3 1.15 is vulnerable to Command Injection. An authenticated attacker with access to the network can submit crafted input to the WLAN configuration functionality. Due to insufficient input validation, the attacker is able to execute arbitrary system commands on the device.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02193 · 82.2th percentile
Published
2026-05-11T00:00Z
EPSS history
Timeline
  • 11 MAY 00:00Z
    EDIMAX BR-6428nS V3 1.15 is vulnerable to Command Injection
    cvelistv5