CVE-2026-19963 | Edimax EW-7478APC 1.04 /goform/stainfo interface command injection

A vulnerability was found in Edimax EW-7478APC 1.04. It has been rated as critical. Affected by this issue is the function stainfo of the file /goform/stainfo. The manipulation of the argument interface leads to command injection.

This vulnerability is traded as CVE-2026-19963. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.