Critical Buffer Overflow Vulnerability in Edimax BR-6478AC V2 Disclosed

A buffer overflow vulnerability, CVE-2026-12806, has been identified in the Edimax BR-6478AC V2 1.23 router. This flaw exists in the formWlSiteSurvey function, where the selSSID argument is not properly validated, allowing authenticated users with low privileges to execute arbitrary code remotely. The vulnerability has a CVSS score of 8.8, indicating a high severity level. Currently, there is no evidence of public exploitation or proof-of-concept code. The vendor has not responded to disclosure attempts, and no patches are available. Security experts recommend network segmentation and strict access controls as mitigations. The vulnerability was published on June 21, 2026.

Key Points: • CVE-2026-12806 is a critical buffer overflow vulnerability in Edimax BR-6478AC V2. • The vulnerability allows remote code execution by authenticated users with low privileges. • No patches are available, and the vendor has not responded to disclosure attempts.