Buffer Overflow Vulnerability in Edimax BR6478ACV2 Router
CVE-2026-129250

9.4CRITICAL

Key Information:

Vendor: Edimax
Status: Br6478acv2
Vendor: CVE Published:; 14 November 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-129250?

A security vulnerability has been identified in the Edimax BR6478ACV2 router, specifically within the formPPTPSetup function found in the device's web interface. An attacker can exploit this vulnerability by sending specially crafted arguments related to the pptpUserName parameter, potentially leading to a buffer overflow condition. This enables the possibility of remote code execution, allowing an attacker to compromise the device without physical access. The exploit has been publicly disclosed, and despite early notification to the vendor, no response has been received.

Affected Version(s)

BR6478ACV2 1.23

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-129250 - Proof of Concept