CVE-2026-19961 | Edimax EW-7478APC 1.04 /goform/formWlSiteSurvey selSSID buffer overflow

A vulnerability was found in Edimax EW-7478APC 1.04. It has been classified as very critical. Affected is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey. Performing a manipulation of the argument selSSID results in buffer overflow.

This vulnerability is reported as CVE-2026-19961. The attack is possible to be carried out remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.