CVE-2026-10165
HIGH
NVD
CVSS Score
8.8
Severity
HIGH
Published
May 31, 2026
Vendor
unknown
Description
A vulnerability was identified in Edimax BR-6478AC 1.23. The impacted element is the function formWanTcpipSetup of the file /goform/formWanTcpipSetup of the component POST Request Handler. Such manipulation of the argument pppUserName leads to stack-based buffer overflow. The attack may be performed from remote. The exploit is publicly available and might be used.