# CVE-2026-9439: Edimax BR-6675nD command injection in /goform/stainfo

Source: https://junglewise.ai/threats/cve-2026-9439-edimax-br-6675nd-command-injection-in-goform-stainfo  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-25. Updated: 2026-05-26  
License: CC BY 4.0 with a link back

CVE-2026-9439 · Severity: medium · CVSS 6.3 · Published 2026-05-25

A vulnerability exists in the Edimax BR-6675nD wireless router, a device used to provide internet connectivity and networking for homes and small offices. An attacker can remotely execute unauthorized commands on the router, potentially leading to a complete takeover of the device, interception of network traffic, or disruption of internet services. This issue is particularly concerning as technical details and exploit methods have been made public, and the manufacturer has not yet provided a fix.

Technologies: [Edimax BR-6675nD](https://junglewise.ai/threats/technologies/br-6675nd). Vendors: [Edimax](https://junglewise.ai/threats/vendors/edimax).

## Quick answers

**Is CVE-2026-9439 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-9439 being exploited in the wild.

**How severe is CVE-2026-9439?** Medium severity, with a CVSS score of 6.3, published 25 May 2026.

**Which products and versions are affected?** Edimax BR-6675nD 1.12.

**Is there a fix for CVE-2026-9439?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-9439 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-9439?** Check whether you run Edimax BR-6675nD at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A command injection vulnerability exists in the Edimax BR-6675nD router running firmware version 1.12. The flaw is located within the 'stainfo' function of the '/goform/stainfo' endpoint, where the 'interface' parameter is improperly neutralized before being passed to a system shell. A remote attacker with low-level privileges can exploit this by sending a specially crafted HTTP request to execute arbitrary OS commands. While the CVSS score indicates a requirement for authentication (PR:L), the exploit is reachable over the network. As of the advisory date, the vendor has not responded to disclosure attempts, and no official patch is available.

## Affected products

- Edimax BR-6675nD 1.12

## Timeline

- 2026-05-25: disclosed: Public disclosure of the vulnerability and exploit details.
- 2026-05-25: advisory: CVE-2026-9439 published.

## References

- [https://lavender-bicycle-a5a.notion.site/EDIMAX-BR-6675nD-stainfo1-34b53a41781f800aa778ffdaa0f9f6ee?source=copy_link](https://lavender-bicycle-a5a.notion.site/EDIMAX-BR-6675nD-stainfo1-34b53a41781f800aa778ffdaa0f9f6ee?source=copy_link)
- [https://vuldb.com/submit/818447](https://vuldb.com/submit/818447)
- [https://vuldb.com/vuln/365420](https://vuldb.com/vuln/365420)
- [https://vuldb.com/vuln/365420/cti](https://vuldb.com/vuln/365420/cti)

## Related threats

- [Edimax BR-6675nD command injection in POST Request Handler](https://junglewise.ai/threats/cve-2026-9423-edimax-br-6675nd-command-injection-in-post-request-handler)
- [Edimax BR-6675nD buffer overflow in formWlSiteSurvey](https://junglewise.ai/threats/cve-2026-9403-edimax-br-6675nd-buffer-overflow-in-formwlsitesurvey)
- [Edimax BR-6675nD command injection in formWlanMP](https://junglewise.ai/threats/cve-2026-9402-edimax-br-6675nd-command-injection-in-formwlanmp)
- [Edimax BR-6675nD buffer overflow in formWanTcpipSetup](https://junglewise.ai/threats/cve-2026-9401-edimax-br-6675nd-buffer-overflow-in-formwantcpipsetup)
- [Edimax BR-6675nD command injection in formUSBStorage](https://junglewise.ai/threats/cve-2026-9400-edimax-br-6675nd-command-injection-in-formusbstorage)