Is CVE-2026-100745 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-100745 being exploited in the wild.

How severe is CVE-2026-100745?

Medium severity, with a CVSS score of 6.3, published 27 September 2026.

Is there a fix for CVE-2026-100745?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-100745 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-100745?

Check whether you run Edimax BR-6428nC at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-100745: Edimax BR-6428nC stack buffer overflow in Wireless Wizard Handler

CVE-2026-100745 · Severity: medium · CVSS 6.3 · Published 2026-09-27

Edimax BR-6428nC is a wireless router used in home and small office networks. The router's web-based wireless configuration interface is vulnerable to a stack-based buffer overflow when processing network interface parameters. An attacker on the network can send a specially crafted request to trigger the overflow and potentially execute arbitrary code, compromising the router and any connected networks.

Vendors: Edimax.

Quick answers

Is CVE-2026-100745 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-100745 being exploited in the wild.
How severe is CVE-2026-100745?: Medium severity, with a CVSS score of 6.3, published 27 September 2026.
Which products and versions are affected?: Edimax BR-6428nC 1.16.
Is there a fix for CVE-2026-100745?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-100745 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-100745?: Check whether you run Edimax BR-6428nC at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A stack-based buffer overflow exists in the Wireless Wizard Handler component of Edimax BR-6428nC 1.16, specifically in the /goform/formWizSurvey endpoint when processing the interface1 or interface2 parameters. Remote exploitation is possible without authentication, allowing an attacker to overflow the stack and potentially achieve remote code execution.

Affected products

Edimax BR-6428nC 1.16

Timeline

2026-09-27: disclosed
2026-09-27: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.