# Edimax vulnerabilities Source: https://junglewise.ai/threats/vendors/edimax Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/edimax.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 90 vulnerabilities in Edimax: 0 in the last 7 days and 15 in the last 90 days, 8 of them critical and 1 exploited in the wild. The most recent, CVE-2026-122051, was published on 5 November 2026. 6 vulnerabilities in the last four weeks, up 200% on the four before (2). 5 critical against 0. 9 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 1 - Last 90 days: 15 - All time: 90 (8 critical, 1 exploited in the wild) ## About Edimax A manufacturer of networking solutions, including routers, switches, and network cameras. ## Latest Edimax vulnerabilities - [CVE-2026-122051: Edimax BR-6208AC command injection in /goform/mp](https://junglewise.ai/threats/cve-2026-122051-a-flaw-has-been-found-in-edimax-br-6208ac-1-32-affected-by-this) (critical, CVSS 10, published 5 Nov 2026) - [CVE-2026-108918: Edimax BR-6208AC command injection in /goform/formWlanMP](https://junglewise.ai/threats/cve-2026-108918-a-vulnerability-was-identified-in-edimax-br-6208ac-1-32-impacted) (critical, CVSS 10, published 12 Oct 2026) - [CVE-2026-108917: Edimax BR-6208AC command injection in /goform/formAutoFWupgrade](https://junglewise.ai/threats/cve-2026-108917-a-vulnerability-was-determined-in-edimax-br-6208ac-1-32-this) (critical, CVSS 10, published 12 Oct 2026) - [CVE-2026-108916: Edimax BR-6208AC command injection in /goform/formAccept](https://junglewise.ai/threats/cve-2026-108916-a-vulnerability-was-found-in-edimax-br-6208ac-1-32-this) (high, CVSS 8.3, published 12 Oct 2026) - [CVE-2026-108915: Edimax BR-6208AC buffer overflow in /goform/formWlanMP](https://junglewise.ai/threats/cve-2026-108915-a-vulnerability-has-been-found-in-edimax-br-6208ac-1-32-this) (critical, CVSS 9.9, published 12 Oct 2026) - [CVE-2026-108914: Edimax BR-6208AC buffer overflow in /goform/formWlSiteSurvey](https://junglewise.ai/threats/cve-2026-108914-a-flaw-has-been-found-in-edimax-br-6208ac-1-32-affected-by-this) (critical, CVSS 9.9, published 12 Oct 2026) - [CVE-2026-100745: Edimax BR-6428nC stack buffer overflow in Wireless Wizard Handler](https://junglewise.ai/threats/cve-2026-100745-a-vulnerability-has-been-found-in-edimax-br-6428nc-1-16-the) (medium, CVSS 6.3, published 27 Sep 2026) - [CVE-2026-96892: Edimax BR-6428nC open redirect in websRedirect handler](https://junglewise.ai/threats/cve-2026-96892-a-flaw-has-been-found-in-edimax-br-6428nc-1-16-the-impacted) (medium, CVSS 4.3, published 24 Sep 2026) - [CVE-2026-82703: Edimax BR-6214K OS command injection in ping endpoint](https://junglewise.ai/threats/cve-2026-82703-edimax-br-6214k-os-command-injection-in-ping-endpoint) (medium, CVSS 6.6, published 31 Aug 2026) - [CVE-2026-82702: Edimax BR-6214K OS command injection in asp_WlanMP](https://junglewise.ai/threats/cve-2026-82702-edimax-br-6214k-os-command-injection-in-asp-wlanmp) (medium, CVSS 6.6, published 31 Aug 2026) - [CVE-2026-19963: Edimax EW-7478APC command injection in stainfo](https://junglewise.ai/threats/cve-2026-19963-edimax-ew-7478apc-command-injection-in-stainfo) (high, CVSS 7.4, published 17 Aug 2026) - [CVE-2026-19962: Edimax EW-7478APC command injection in setWAN](https://junglewise.ai/threats/cve-2026-19962-edimax-ew-7478apc-command-injection-in-setwan) (high, CVSS 7.4, published 17 Aug 2026) - [CVE-2026-19961: Edimax EW-7478APC buffer overflow in wireless site survey](https://junglewise.ai/threats/cve-2026-19961-edimax-ew-7478apc-buffer-overflow-in-wireless-site-survey) (critical, CVSS 9.9, published 16 Aug 2026) - [CVE-2026-19960: Edimax EW-7478APC command injection in formWlbasic](https://junglewise.ai/threats/cve-2026-19960-edimax-ew-7478apc-command-injection-in-formwlbasic) (high, CVSS 7.4, published 16 Aug 2026) - [CVE-2026-19959: Edimax EW-7478APC stack buffer overflow in WAN configuration](https://junglewise.ai/threats/cve-2026-19959-edimax-ew-7478apc-stack-buffer-overflow-in-wan-configuration) (critical, CVSS 9.9, published 16 Aug 2026) - [CVE-2026-13583: Edimax EW-7478APC buffer overflow in formUSBFolder](https://junglewise.ai/threats/cve-2026-13583-edimax-ew-7478apc-buffer-overflow-in-formusbfolder) (high, CVSS 8.8, published 29 Jun 2026) - [CVE-2026-13582: Edimax EW-7478APC buffer overflow in formUSBAccount](https://junglewise.ai/threats/cve-2026-13582-edimax-ew-7478apc-buffer-overflow-in-formusbaccount) (high, CVSS 8.8, published 29 Jun 2026) - [CVE-2026-13581: Edimax EW-7478APC OS command injection in formStaDrvSetup](https://junglewise.ai/threats/cve-2026-13581-edimax-ew-7478apc-os-command-injection-in-formstadrvsetup) (medium, CVSS 6.3, published 29 Jun 2026) - [CVE-2026-13580: Edimax EW-7478APC buffer overflow in formQoS POST handler](https://junglewise.ai/threats/cve-2026-13580-edimax-ew-7478apc-buffer-overflow-in-formqos-post-handler) (high, CVSS 8.8, published 29 Jun 2026) - [CVE-2026-13564: Edimax EW-7478APC stack overflow in formPPPoESetup](https://junglewise.ai/threats/cve-2026-13564-edimax-ew-7478apc-stack-overflow-in-formpppoesetup) (high, CVSS 8.8, published 29 Jun 2026) - [CVE-2026-13563: Edimax EW-7478APC stack buffer overflow in formL2TPSetup](https://junglewise.ai/threats/cve-2026-13563-edimax-ew-7478apc-stack-buffer-overflow-in-forml2tpsetup) (high, CVSS 8.8, published 29 Jun 2026) - [CVE-2026-13562: Edimax EW-7478APC buffer overflow in formiNICSiteSurvey](https://junglewise.ai/threats/cve-2026-13562-edimax-ew-7478apc-buffer-overflow-in-forminicsitesurvey) (high, CVSS 8.8, published 29 Jun 2026) - [CVE-2026-13561: Edimax EW-7478APC OS command injection in formiNICbasic](https://junglewise.ai/threats/cve-2026-13561-edimax-ew-7478apc-os-command-injection-in-forminicbasic) (medium, CVSS 6.3, published 29 Jun 2026) - [CVE-2026-13560: Edimax EW-7478APC OS command injection in formAccept](https://junglewise.ai/threats/cve-2026-13560-edimax-ew-7478apc-os-command-injection-in-formaccept) (medium, CVSS 6.3, published 29 Jun 2026) - [CVE-2026-12810: Edimax BR-6478AC V2 command injection in POST Request Handler](https://junglewise.ai/threats/cve-2026-12810-edimax-br-6478ac-v2-command-injection-in-post-request-handler) (medium, CVSS 6.3, published 21 Jun 2026) ## Most severe Edimax vulnerabilities - [CVE-2025-1316: Edimax IC-7100 IP Camera OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2025-1316-edimax-ic-7100-ip-camera-os-command-injection-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 19 Mar 2025) - [CVE-2026-108918: Edimax BR-6208AC command injection in /goform/formWlanMP](https://junglewise.ai/threats/cve-2026-108918-a-vulnerability-was-identified-in-edimax-br-6208ac-1-32-impacted) (critical, CVSS 10, published 12 Oct 2026) - [CVE-2026-108917: Edimax BR-6208AC command injection in /goform/formAutoFWupgrade](https://junglewise.ai/threats/cve-2026-108917-a-vulnerability-was-determined-in-edimax-br-6208ac-1-32-this) (critical, CVSS 10, published 12 Oct 2026) - [CVE-2026-122051: Edimax BR-6208AC command injection in /goform/mp](https://junglewise.ai/threats/cve-2026-122051-a-flaw-has-been-found-in-edimax-br-6208ac-1-32-affected-by-this) (critical, CVSS 10, published 5 Nov 2026) - [CVE-2026-19961: Edimax EW-7478APC buffer overflow in wireless site survey](https://junglewise.ai/threats/cve-2026-19961-edimax-ew-7478apc-buffer-overflow-in-wireless-site-survey) (critical, CVSS 9.9, published 16 Aug 2026) - [CVE-2026-19959: Edimax EW-7478APC stack buffer overflow in WAN configuration](https://junglewise.ai/threats/cve-2026-19959-edimax-ew-7478apc-stack-buffer-overflow-in-wan-configuration) (critical, CVSS 9.9, published 16 Aug 2026) - [CVE-2026-108914: Edimax BR-6208AC buffer overflow in /goform/formWlSiteSurvey](https://junglewise.ai/threats/cve-2026-108914-a-flaw-has-been-found-in-edimax-br-6208ac-1-32-affected-by-this) (critical, CVSS 9.9, published 12 Oct 2026) - [CVE-2026-108915: Edimax BR-6208AC buffer overflow in /goform/formWlanMP](https://junglewise.ai/threats/cve-2026-108915-a-vulnerability-has-been-found-in-edimax-br-6208ac-1-32-this) (critical, CVSS 9.9, published 12 Oct 2026) - [CVE-2026-36734: Edimax BR-6428nS V3 command injection in WLAN configuration](https://junglewise.ai/threats/cve-2026-36734-edimax-br-6428ns-v3-command-injection-in-wlan-configuration) (high, CVSS 8.8, published 11 May 2026) - [CVE-2026-9482: Edimax EW-7438RPn stack overflow in formSDHCP](https://junglewise.ai/threats/cve-2026-9482-edimax-ew-7438rpn-stack-overflow-in-formsdhcp) (high, CVSS 8.8, published 25 May 2026) ## Vulnerabilities per week 6 vulnerabilities in the last four weeks, up 200% on the four before (2). 5 critical against 0. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 2 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 2 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 2 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 5 | 4 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 1 | 1 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Edimax technologies - [Edimax EW-7438RPn](https://junglewise.ai/threats/technologies/ew-7438rpn): 22 vulnerabilities - [Edimax EW-7478APC](https://junglewise.ai/threats/technologies/ew-7478apc): 14 vulnerabilities - [Edimax BR-6675nD](https://junglewise.ai/threats/technologies/br-6675nd): 12 vulnerabilities - [Edimax BR-6478AC](https://junglewise.ai/threats/technologies/br-6478ac): 10 vulnerabilities - [Edimax BR-6428nS](https://junglewise.ai/threats/technologies/br-6428ns): 7 vulnerabilities - [Edimax BR-6208AC](https://junglewise.ai/threats/technologies/br-6208ac): 6 vulnerabilities - [Edimax BR-6478AC V2 firmware](https://junglewise.ai/threats/technologies/br-6478ac-v2): 5 vulnerabilities - [Edimax Br-6478ac V3](https://junglewise.ai/threats/technologies/br-6478ac-v3): 3 vulnerabilities - [Edimax Br-6478ac V3 Firmware](https://junglewise.ai/threats/technologies/br-6478ac-v3-firmware): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Edimax vulnerabilities", https://junglewise.ai/threats/vendors/edimax, 12 November 2026.