CVE-2026-19962
Edimax EW-7478APC setWAN command injection
Description
A flaw has been found in Edimax EW-7478APC 1.04. Affected by this vulnerability is the function setWAN of the file /goform/setWAN. Executing a manipulation of the argument pppUserName/pptpUserName/L2TPUserName can lead to command injection. The attack may be performed from remote. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
INFO
Published Date :
Aug. 16, 2026, 11:15 p.m.
Last Modified :
Aug. 16, 2026, 11:15 p.m.
Remotely Exploit :
No
Source :
VulDB
Solution
- Apply firmware updates when released by the vendor.
- Sanitize all user inputs for the setWAN function.
- Restrict access to the affected endpoint.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-19962 vulnerability anywhere in the article.