CVE-2026-9344 | Edimax EW-7438RPn up to 1.31 webs /goform/formWpsStart pinCode/wlan-url stack-based overflow

A vulnerability was found in Edimax EW-7438RPn up to 1.31 and classified as critical. The impacted element is an unknown function of the file /goform/formWpsStart of the component webs. Such manipulation of the argument pinCode/wlan-url leads to stack-based buffer overflow.

This vulnerability is documented as CVE-2026-9344. The attack can be executed remotely. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.