CVE-2026-9403CWE-119CWE-120

Edimax BR-6675nD POST Request formWlSiteSurvey buffer overflow

High · published May 24, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
56.3
In the wild
Unconfirmed
What it is

A vulnerability was determined in Edimax BR-6675nD 1.12. The impacted element is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey of the component POST Request Handler. This manipulation of the argument selSSID causes buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00805 · 56.3th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-05-24T22:45Z
EPSS history
Timeline
  • 24 MAY 22:45Z
    Edimax BR-6675nD POST Request formWlSiteSurvey buffer overflow
    cvelistv5