CVE-2026-9460 | Edimax EW-7438RPn 1.31 /goform/formAccept submit-url stack-based overflow

A vulnerability described as critical has been identified in Edimax EW-7438RPn 1.31. This impacts the function formAccept of the file /goform/formAccept. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow.

This vulnerability is registered as CVE-2026-9460. It is possible to launch the attack remotely. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.