CVE-2026-10163 - Edimax BR-6478AC POST Request formUSBAccount buffer overflow

Back Back to CVE browser

HIGH

Edimax BR-6478AC POST Request formUSBAccount buffer overflow

Published May 31, 2026

8.7

HIGH

CVSS 4.0

EPSS 0.46%

Description

A vulnerability has been found in Edimax BR-6478AC 1.23. This issue affects the function formUSBAccount of the file /goform/formUSBAccount of the component POST Request Handler. The manipulation of the argument UserName/Password leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

Affected products

Vendor Edimax Product BR-6478AC Default
n/a
- Version
  1.23
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Edimax

BR-6478AC

n/a

Version	Status	Constraints
1.23	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-120

Classic Buffer Overflow

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33482
Advisory
https://lavender-bicycle-a5a.notion.site/EDIMAX-BR6478ACV2-formUSBAccount-34b53a41781f803eb9b0dae1fea4dc3e?source=copy_link
exploit
https://vuldb.com/submit/818599
third-party-advisory
https://vuldb.com/vuln/367416
vdb-entrytechnical-description
https://vuldb.com/vuln/367416/cti
signaturepermissions-required

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33482		Advisory
https://lavender-bicycle-a5a.notion.site/EDIMAX-BR6478ACV2-formUSBAccount-34b53a41781f803eb9b0dae1fea4dc3e?source=copy_link		exploit
https://vuldb.com/submit/818599		third-party-advisory
https://vuldb.com/vuln/367416		vdb-entrytechnical-description
https://vuldb.com/vuln/367416/cti		signaturepermissions-required