CVE-2026-9346 | Edimax EW-7438RPn up to 1.31 webs /goform/formWirelessTbl submit-url buffer overflow

A vulnerability was found in Edimax EW-7438RPn up to 1.31. It has been declared as critical. This impacts the function formWirelessTbl of the file /goform/formWirelessTbl of the component webs. Executing a manipulation of the argument submit-url can lead to buffer overflow.

This vulnerability appears as CVE-2026-9346. The attack may be performed from remote. In addition, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.