CVE-2026-82703

Name of the Vulnerable Software and Affected Versions Edimax BR-6214K version 1.40

Description A security flaw allows remote OS command injection via the asp setPing endpoint. The issue exists in the system() function within the www/ping.asp file, where manipulating the pingstr variable enables the execution of arbitrary operating system commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the www/ping.asp file to minimize the risk of exploitation.