Exploitation ongoing with high activity in latest observed window (2 mentions)
Recommended action window: Immediate (within 24h)
NVD description
A weakness has been identified in Edimax BR-6478AC 1.23. This affects the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component POST Request Handler. This manipulation of the argument rootAPmac causes command injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-10127 A weakness has been identified in Edimax BR-6478AC 1.23. This affects the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component POST Request H… https://www.cve.org/CVERecord?id=CVE-2026-10127
Post summary
The CVE-2026-10127 record notes a weakness in the Edimax BR-6478AC 1.23 router’s formStaDrvSetup function, but provides no PoC, exploit, or patch details.
CVE-2026-10127 Command Injection in Edimax BR-6478AC 1.23 POST Request Handler (Exploitation Reported) https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-10127
Post summary
The snippet reports that command injection in the Edimax BR‑6478AC router is being actively exploited, with no mention of patches or mitigations in this brief notice.