CVE-2026-12806
Edimax BR-6478AC V2 POST Request formWlSiteSurvey buffer overflow
CVSS Score
8.8
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability has been found in Edimax BR-6478AC V2 1.23. The impacted element is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey of the component POST Request Handler. The manipulation of the argument selSSID leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
| CWE | CWE-120 CWE-119 |
| Vendor | edimax |
| Product | br-6478ac v2 |
| Published | Jun 21, 2026 |
Stay Ahead of the Next One
Get instant alerts for edimax br-6478ac v2
Be the first to know when new high vulnerabilities affecting edimax br-6478ac v2 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Edimax / BR-6478AC V2
1.23
References
vuldb.com: https://vuldb.com/vuln/372600 vuldb.com: https://vuldb.com/vuln/372600/cti vuldb.com: https://vuldb.com/cve/CVE-2026-12806 vuldb.com: https://vuldb.com/submit/836668 lavender-bicycle-a5a.notion.site: https://lavender-bicycle-a5a.notion.site/EDIMAX-BR6478ACV2-formWlSiteSurvey-34b53a41781f80669c10df409a0851d4?source=copy_link
Credits
🔍 yhryhryhr_tu (VulDB User) VulDB CNA Team