CVE-2026-12806

Name of the Vulnerable Software and Affected Versions Edimax BR-6478AC V2 version 1.23

Description A buffer overflow can be triggered remotely via the POST Request Handler. The issue exists within the formWlSiteSurvey() function located in the '/goform/formWlSiteSurvey' endpoint. The flaw is caused by the improper manipulation of the selSSID argument.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the '/goform/formWlSiteSurvey' endpoint to minimize the risk of exploitation.