CVE-2026-9363 | Edimax EW-7438RPn 1.12 POST Request formEZCHNwlanSetu formEZCHNwlanSetup method command injection

A vulnerability identified as critical has been detected in Edimax EW-7438RPn 1.12. This issue affects the function formEZCHNwlanSetup of the file /goform/formEZCHNwlanSetu of the component POST Request Handler. Performing a manipulation of the argument method results in command injection.

This vulnerability is known as CVE-2026-9363. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.