Is CVE-2026-8777 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-8777 being exploited in the wild.

How severe is CVE-2026-8777?

Medium severity, with a CVSS score of 6.3, published 18 May 2026.

Is there a fix for CVE-2026-8777?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-8777 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-8777?

Check whether you run Edimax BR-6428nS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-8777: Edimax BR-6428NS command injection in formStaDrvSetup

CVE-2026-8777 · Severity: medium · CVSS 6.3 · Published 2026-05-18

A vulnerability exists in the Edimax BR-6428NS wireless router that allows an attacker to execute unauthorized commands. By sending a specially crafted web request to the device's configuration interface, a remote user could gain control over the router's operations. This could lead to service disruptions or unauthorized access to the local network.

Technologies: Edimax BR-6428nS. Vendors: Edimax.

Quick answers

Is CVE-2026-8777 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-8777 being exploited in the wild.
How severe is CVE-2026-8777?: Medium severity, with a CVSS score of 6.3, published 18 May 2026.
Which products and versions are affected?: Edimax BR-6428nS 1.10.
Is there a fix for CVE-2026-8777?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-8777 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-8777?: Check whether you run Edimax BR-6428nS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A command injection vulnerability (CWE-77) exists in the Edimax BR-6428NS router version 1.10. The flaw is located within the formStaDrvSetup function in the /goform/formStaDrvSetup component, which handles POST requests. An attacker can trigger this vulnerability by manipulating the 'stadrv_ssid' argument. While the attack requires network reachability and low-level privileges (PR:L), it allows for remote command execution on the underlying operating system. As of the disclosure date, the vendor has not responded to reports, and no official patch is available. Public exploit code is reportedly available.

Affected products

Edimax BR-6428NS 1.10

Timeline

2026-05-18: disclosed: Initial public disclosure via VulDB and NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.