CVE-2026-9462 | Edimax EW-7438RPn 1.31 formWpsProxyEnable submit-url stack-based overflow

A vulnerability classified as critical was found in Edimax EW-7438RPn 1.31. Affected by this vulnerability is the function formWpsProxyEnable of the file /goform/formWpsProxyEnable. The manipulation of the argument submit-url results in stack-based buffer overflow.

This vulnerability is reported as CVE-2026-9462. The attack can be launched remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.