Edimax BR-6478AC v2.20 exploit enables authenticated command injection
Exploit-DB published a remote exploit for firmware v2.20; no CVE, patch, or confirmed attacks are named.
42
Product
BR-6478AC
- Mentions · 7d0
- Mentions · 30d3
- All mentions3
- First seenOct 20, 2026
- Last mentioned10d ago
Timeline
3 articles · newest firstEdimax BR-6478AC v2.20 setWAN handler has authenticated command injection
A WAN-settings POST passes an unsanitized username into system(), and the check looks at one character.
46
Edimax BR-6478AC v2.20 formWlanMP handler has authenticated command injection
A production manufacturing-test route still accepts thirty raw fields that are passed to system().
46
Appears with
- Edimax Technologyvendor · 2
- 0day Rubbish Research Teamorganization · 2
- Edimaxvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.