CVE-2026-8775 | Edimax BR-6428NS 1.10 POST Request /goform/formL2TPSetup L2TPUserName buffer overflow

A vulnerability was found in Edimax BR-6428NS 1.10. It has been rated as critical. This affects the function formL2TPSetup of the file /goform/formL2TPSetup of the component POST Request Handler. This manipulation of the argument L2TPUserName causes buffer overflow.

The identification of this vulnerability is CVE-2026-8775. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.