CVE-2026-9401 | Edimax BR-6675nD 1.12 POST Request formWanTcpipSetup pppUserName buffer overflow

A vulnerability identified as critical has been detected in Edimax BR-6675nD 1.12. Impacted is the function formWanTcpipSetup of the file /goform/formWanTcpipSetup of the component POST Request Handler. The manipulation of the argument pppUserName leads to buffer overflow.

This vulnerability is documented as CVE-2026-9401. The attack can be initiated remotely. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More