Back to overview

CVE-2026-12806

HIGH
8.8
CVSS 3.1
Description
A vulnerability has been found in Edimax BR-6478AC V2 1.23. The impacted element is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey of the component POST Request Handler. The manipulation of the argument selSSID leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metadata

CVE ID
CVE-2026-12806
State
PUBLISHED
Assigner
VulDB
Reserved
2026-06-21 04:19 UTC
Published
2026-06-21 19:30 UTC
Last updated
2026-06-21 19:30 UTC
Primary CWE
CWE-120
Buffer Overflow
Vendor / Product
Edimax / BR-6478AC V2
Sources
cve.org  ·  NVD

Severity & Metrics

8.8 HIGH CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
Affected products (1)
VendorProductPlatformVersions
Edimax BR-6478AC V2 — 1.23
Weakness (CWE)
CWESourceDescription
CWE-119 cna Memory Corruption
CWE-120 cna Buffer Overflow
CVSS scores (4)
ScoreSeverityVersionSourceVector
9.0 N/D 2.0 cna AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR
8.8 HIGH 3.1 cna CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
8.8 HIGH 3.0 cna CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
8.7 HIGH 4.0 cna CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
References (5)
Back to overview