Edimax BR-6478AC v2.20 setWAN handler has authenticated command injection
A WAN-settings POST passes an unsanitized username into system(), and the check looks at one character.
46
Vendor
Edimax Technology
- Mentions · 7d0
- Mentions · 30d2
- All mentions2
- First seenOct 20, 2026
- Last mentioned10d ago
Timeline
2 articles · newest firstEdimax BR-6478AC v2.20 formWlanMP handler has authenticated command injection
A production manufacturing-test route still accepts thirty raw fields that are passed to system().
46
Appears with
- 0day Rubbish Research Teamorganization · 2
- BR-6478ACproduct · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.