Is CVE-2026-82702 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-82702 being exploited in the wild.

How severe is CVE-2026-82702?

Medium severity, with a CVSS score of 6.6, published 31 August 2026.

Is there a fix for CVE-2026-82702?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-82702 attacked?

It is attacked over the network, in device firmware.

Am I affected by CVE-2026-82702?

Check whether you run Edimax BR-6214K at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-82702: Edimax BR-6214K OS command injection in asp_WlanMP

CVE-2026-82702 · Severity: medium · CVSS 6.6 · Published 2026-08-31

The Edimax BR-6214K router's wireless management interface contains a flaw that allows authenticated administrators to execute arbitrary system commands through a manipulated parameter. An attacker with valid web management credentials could run commands with full system privileges, potentially compromising the router's operation, stealing data, or using it as a foothold for network attacks.

Vendors: Edimax.

Quick answers

Is CVE-2026-82702 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-82702 being exploited in the wild.
How severe is CVE-2026-82702?: Medium severity, with a CVSS score of 6.6, published 31 August 2026.
Which products and versions are affected?: Edimax BR-6214K 1.40.
Is there a fix for CVE-2026-82702?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-82702 attacked?: It is attacked over the network, in device firmware.
Am I affected by CVE-2026-82702?: Check whether you run Edimax BR-6214K at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This is an OS command injection vulnerability (CWE-78) in the /goform/asp_WlanMP endpoint of Edimax BR-6214K firmware version 1.40. The vulnerable component fails to sanitize the ateFunc parameter before passing it to a system() call that constructs a shell command (/bin/rftest.sh). An authenticated attacker can inject shell metacharacters (e.g., ;id;#) to execute arbitrary commands with the privileges of the Boa web server, which runs as root. Authentication is required (valid web-management credentials), but the vulnerability is remotely exploitable over the network. A public proof-of-concept exists; the vendor did not respond to early disclosure.

Affected products

Edimax BR-6214K 1.40

Timeline

2026-08-31: disclosed: CVE-2026-82702 published on NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.