Quick answers
- Is CVE-2026-8776 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-8776 being exploited in the wild.
- How severe is CVE-2026-8776?
- High severity, with a CVSS score of 8.8, published 18 May 2026.
- Which products and versions are affected?
- Edimax BR-6428nS 1.10.
- Is there a fix for CVE-2026-8776?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-8776 attacked?
- It is attacked over the network, in a network appliance.
- Am I affected by CVE-2026-8776?
- Check whether you run Edimax BR-6428nS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
A stack-based buffer overflow vulnerability exists in the Edimax BR-6428NS router version 1.10. The flaw is located within the 'formPPTPSetup' function in the '/goform/formPPTPSetup' file, which handles POST requests for PPTP VPN configuration. Specifically, the 'pptpUserName' argument is processed without adequate bounds checking, allowing an attacker to overwrite memory. While the attack requires low-level authentication (PR:L), it can be executed over the network. Successful exploitation could lead to remote code execution (RCE) or a denial of service (DoS) condition. As of the advisory date, the vendor has not responded to disclosure attempts, and no official patch is available.
Affected products
- Edimax BR-6428NS 1.10
Timeline
- 2026-05-18: advisory: Initial disclosure by VulDB and NVD
- 2026-05-18: disclosed: Public exploit disclosed to the public