{"id":"CVE-2026-9463","state":"PUBLISHED","title":"Edimax EW-7438RPn formLicence stack-based overflow","description":"A flaw has been found in Edimax EW-7438RPn 1.31. Affected by this issue is the function formLicence of the file /goform/formLicence. This manipulation of the argument submit-url causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","publishedAt":"2026-05-25T13:45:08.371Z","updatedAt":"2026-05-26T14:57:22.802Z","severity":{"score":8.7,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["Edimax EW-7438RPn"],"affected":[{"vendor":"Edimax","product":"EW-7438RPn","versions":[{"version":"1.31","status":"affected"}],"cpes":["cpe:2.3:a:edimax:ew-7438rpn:*:*:*:*:*:*:*:*"]}],"references":["https://vuldb.com/vuln/365444","https://vuldb.com/vuln/365444/cti","https://vuldb.com/submit/813900","https://github.com/wudipjq/my_vuln/blob/main/Edimax/vuln_16/16.md"],"weaknesses":["CWE-121","CWE-119"],"ingestedAt":"2026-10-29T20:13:52.441Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/9xxx/CVE-2026-9463.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-9463","state":"PUBLISHED","datePublished":"2026-05-25T13:45:08.371Z","dateUpdated":"2026-05-26T14:57:22.802Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-05-24T08:03:14.471Z"},"containers":{"cna":{"title":"Edimax EW-7438RPn formLicence stack-based overflow","descriptions":[{"lang":"en","value":"A flaw has been found in Edimax EW-7438RPn 1.31. Affected by this issue is the function formLicence of the file /goform/formLicence. This manipulation of the argument submit-url causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."}],"affected":[{"vendor":"Edimax","product":"EW-7438RPn","versions":[{"version":"1.31","status":"affected"}],"cpes":["cpe:2.3:a:edimax:ew-7438rpn:*:*:*:*:*:*:*:*"]}],"references":[{"url":"https://vuldb.com/vuln/365444","name":"VDB-365444 | Edimax EW-7438RPn formLicence stack-based overflow","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/365444/cti","name":"VDB-365444 | CTI Indicators (IOB, IOC, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/submit/813900","name":"Submit #813900 | Edimax EW-7438RPn 1.31 Stack-based Buffer Overflow","tags":["third-party-advisory"]},{"url":"https://github.com/wudipjq/my_vuln/blob/main/Edimax/vuln_16/16.md","tags":["exploit"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.7,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P","baseSeverity":"HIGH"}},{"cvssV3_1":{"version":"3.1","baseScore":8.8,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV3_0":{"version":"3.0","baseScore":8.8,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV2_0":{"version":"2.0","baseScore":9,"vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-121","type":"CWE","lang":"en","description":"Stack-based Buffer Overflow"}]},{"descriptions":[{"cweId":"CWE-119","type":"CWE","lang":"en","description":"Memory Corruption"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-05-25T13:45:08.371Z"},"timeline":[{"time":"2026-05-24T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-05-24T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-05-24T10:08:30.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"Buoy (VulDB User)","type":"reporter"},{"lang":"en","value":"VulDB CNA Team","type":"coordinator"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-05-26T14:56:09.616189Z","id":"CVE-2026-9463","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-05-26T14:57:22.802Z"}}]}}}