CVE-2026-13582 | Edimax EW-7478APC 1.04 POST Request /goform/formUSBAccount UserName/Password buffer overflow

A vulnerability has been found in Edimax EW-7478APC 1.04 and classified as critical. This issue affects the function formUSBAccount of the file /goform/formUSBAccount of the component POST Request Handler. This manipulation of the argument UserName/Password causes buffer overflow.

This vulnerability is tracked as CVE-2026-13582. The attack is possible to be carried out remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.