# CVE-2026-36734: Edimax BR-6428nS V3 command injection in WLAN configuration

Source: https://junglewise.ai/threats/cve-2026-36734-edimax-br-6428ns-v3-command-injection-in-wlan-configuration  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-11. Updated: 2026-07-05  
License: CC BY 4.0 with a link back

CVE-2026-36734 · Severity: high · CVSS 8.8 · Published 2026-05-11

The Edimax BR-6428nS V3 router, commonly used for home and small office networking, contains a security flaw in its wireless configuration settings. An authorized user on the network can exploit this to run unauthorized commands on the router's internal system. This could lead to a complete takeover of the device, allowing an attacker to monitor internet traffic, change network settings, or disable the device entirely.

Vendors: [Edimax](https://junglewise.ai/threats/vendors/edimax).

## Quick answers

**Is CVE-2026-36734 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-36734 being exploited in the wild.

**How severe is CVE-2026-36734?** High severity, with a CVSS score of 8.8, published 11 May 2026.

**Which products and versions are affected?** Edimax BR-6428nS V3 1.15.

**Is there a fix for CVE-2026-36734?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-36734 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-36734?** Check whether you run Edimax BR-6428nS V3 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A command injection vulnerability (CWE-77) exists in the web-based management interface of the Edimax BR-6428nS V3 router running firmware version 1.15. The flaw is located within the WLAN configuration functionality, where the application fails to sufficiently validate user-supplied input before passing it to a system shell. An authenticated attacker with network access can submit crafted input containing shell metacharacters to vulnerable parameters. Successful exploitation allows for arbitrary command execution on the underlying operating system with the privileges of the web service, potentially leading to full device compromise.

## Affected products

- Edimax BR-6428nS V3 1.15

## Timeline

- 2026-05-09: disclosed: Initial disclosure date reported by researcher
- 2026-05-11: advisory: CVE published to NVD

## References

- [https://github.com/theShinigami/CVE-Disclosures/tree/main/CVE-2026-36734](https://github.com/theShinigami/CVE-Disclosures/tree/main/CVE-2026-36734)