Buffer Overflow Vulnerability in Edimax BR-6428NS Router
CVE-2026-9294

8.7HIGH

Key Information:

Vendor

Edimax

Status
Br-6428ns
Vendor
CVE Published:
23 May 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-9294?

A vulnerability exists within the Edimax BR-6428NS router, specifically in the function handling POST requests for TCP/IP setup. The manipulation of the pppUserName parameter can trigger a buffer overflow, which enables a remote attacker to exploit this flaw. The potential consequences include unauthorized access to the device, which could lead to further compromises in the network. Notably, this vulnerability is publicly acknowledged, and the vendor has not responded to early disclosure attempts.

Affected Version(s)

BR-6428NS 1.10

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-9294 - Proof of Concept

References

https://vuldb.com/vuln/365241
vdb-entrytechnical-description
https://vuldb.com/vuln/365241/cti
signaturepermissions-required
https://vuldb.com/submit/811533
third-party-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

wxhwxhwxh_tutu (VulDB User)
VulDB CNA Team
.