CVE-2026-13583 | Edimax EW-7478APC 1.04 POST Request /goform/formUSBFolder ShareName/SelectName buffer overflow

A vulnerability was found in Edimax EW-7478APC 1.04 and classified as critical. Impacted is the function formUSBFolder of the file /goform/formUSBFolder of the component POST Request Handler. Such manipulation of the argument ShareName/SelectName leads to buffer overflow.

This vulnerability is listed as CVE-2026-13583. The attack may be performed from remote. In addition, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.