CVE-2026-19959
Edimax EW-7478APC formWanTcpipSetup stack-based overflow
CVSS Score
9.9
EPSS Score
0.0%
EPSS Percentile
0th
A weakness has been identified in Edimax EW-7478APC 1.04. This affects the function formWanTcpipSetup of the file /goform/formWanTcpipSetup. This manipulation of the argument pppUserName causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
| CWE | CWE-121 CWE-119 |
| Vendor | edimax |
| Product | ew-7478apc |
| Published | Aug 16, 2026 |
Stay Ahead of the Next One
Get instant alerts for edimax ew-7478apc
Be the first to know when new critical vulnerabilities affecting edimax ew-7478apc are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Edimax / EW-7478APC
1.04
References
vuldb.com: https://vuldb.com/vuln/391136 vuldb.com: https://vuldb.com/vuln/391136/cti vuldb.com: https://vuldb.com/cve/CVE-2026-19959 vuldb.com: https://vuldb.com/submit/872873 lavender-bicycle-a5a.notion.site: https://lavender-bicycle-a5a.notion.site/EDIMAX-EW-7478APC-formWanTcpipSetup-34b53a41781f8047b36bd11dbcaa84dc?source=copy_link
Credits
🔍 wxhwxhwxh_mie (VulDB User) VulDB CNA Team