CVE-2026-10166 | Edimax BR-6478AC 1.23 POST Request /goform/formWlbasic rootAPmac command injection

A vulnerability, which was classified as critical, has been found in Edimax BR-6478AC 1.23. The affected element is the function formWlbasic of the file /goform/formWlbasic of the component POST Request Handler. This manipulation of the argument rootAPmac causes command injection.

This vulnerability is tracked as CVE-2026-10166. The attack is possible to be carried out remotely. Moreover, an exploit is present.