CVE-2026-9480 | Edimax EW-7438RPn 1.31 /goform/formrefresh submit-url stack-based overflow

A vulnerability was found in Edimax EW-7438RPn 1.31 and classified as critical. The impacted element is the function formrefresh of the file /goform/formrefresh. The manipulation of the argument submit-url results in stack-based buffer overflow.

This vulnerability is known as CVE-2026-9480. It is possible to launch the attack remotely. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.