# CVE-2026-9382: Edimax BR-6675nD buffer overflow in formPPTPSetup

Source: https://junglewise.ai/threats/cve-2026-9382-edimax-br-6675nd-buffer-overflow-in-formpptpsetup  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-24. Updated: 2026-05-26  
License: CC BY 4.0 with a link back

CVE-2026-9382 · Severity: high · CVSS 8.8 · Published 2026-05-24

A security vulnerability has been identified in the Edimax BR-6675nD wireless router. This device is used to provide internet connectivity and network management for home and small office environments. An attacker could exploit this flaw to crash the device or potentially take full control of it, leading to a complete loss of internet service and unauthorized access to the local network.

Technologies: [Edimax BR-6675nD](https://junglewise.ai/threats/technologies/br-6675nd). Vendors: [Edimax](https://junglewise.ai/threats/vendors/edimax).

## Quick answers

**Is CVE-2026-9382 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-9382 being exploited in the wild.

**How severe is CVE-2026-9382?** High severity, with a CVSS score of 8.8, published 24 May 2026.

**Which products and versions are affected?** Edimax BR-6675nD 1.12.

**Is there a fix for CVE-2026-9382?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-9382 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-9382?** Check whether you run Edimax BR-6675nD at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A stack-based buffer overflow vulnerability exists in the Edimax BR-6675nD router version 1.12. The flaw is located within the 'formPPTPSetup' function in the '/goform/formPPTPSetup' component, which handles POST requests for PPTP configuration. By sending a specially crafted POST request with a manipulated 'pptpUserName' argument, a remote attacker with low privileges can trigger the overflow. This can lead to arbitrary code execution or a denial of service (DoS). As of the disclosure date, the vendor has not responded to reports, and no official patch is available. Public exploit code is reportedly available.

## Affected products

- Edimax BR-6675nD 1.12

## Timeline

- 2026-05-24: advisory: Vulnerability disclosed by VulDB
- 2026-05-24: disclosed: Exploit published publicly

## References

- [https://lavender-bicycle-a5a.notion.site/EDIMAX-BR-6675nD-formPPTPSetup-34b53a41781f80e6ab7df78a28ffe568?source=copy_link](https://lavender-bicycle-a5a.notion.site/EDIMAX-BR-6675nD-formPPTPSetup-34b53a41781f80e6ab7df78a28ffe568?source=copy_link)
- [https://vuldb.com/submit/811560](https://vuldb.com/submit/811560)
- [https://vuldb.com/vuln/365345](https://vuldb.com/vuln/365345)
- [https://vuldb.com/vuln/365345/cti](https://vuldb.com/vuln/365345/cti)

## Related threats

- [Edimax BR-6675nD command injection in /goform/stainfo](https://junglewise.ai/threats/cve-2026-9439-edimax-br-6675nd-command-injection-in-goform-stainfo)
- [Edimax BR-6675nD command injection in POST Request Handler](https://junglewise.ai/threats/cve-2026-9423-edimax-br-6675nd-command-injection-in-post-request-handler)
- [Edimax BR-6675nD buffer overflow in formWlSiteSurvey](https://junglewise.ai/threats/cve-2026-9403-edimax-br-6675nd-buffer-overflow-in-formwlsitesurvey)
- [Edimax BR-6675nD command injection in formWlanMP](https://junglewise.ai/threats/cve-2026-9402-edimax-br-6675nd-command-injection-in-formwlanmp)
- [Edimax BR-6675nD buffer overflow in formWanTcpipSetup](https://junglewise.ai/threats/cve-2026-9401-edimax-br-6675nd-buffer-overflow-in-formwantcpipsetup)