CVE-2026-12806Disclosure

LOWCVSS 7.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability has been found in Edimax BR-6478AC V2 1.23. The impacted element is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey of the component POST Request Handler. The manipulation of the argument selSSID leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-119CWE-120

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 5 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 4 mentions (2026-06-21); latest day: 1
  • 5 total mentions across 2 days

Deep dive

Activity timeline5 mentions / 2d
01234Mentions · 2026-06-21: 4Mentions · 2026-06-22: 1Patch / Workaround · 2026-06-22: 1Technical Details · 2026-06-21: 2Technical Details · 2026-06-22: 106-2106-22
Signal classification3 categories
Disclosure
360.0%
General
120.0%
Patch
120.0%
Referenced assets5 URLs
Classification over time
DateTotalLabels
2026-06-214
Disclosure3General1
2026-06-221
Patch1
Full discourse5 posts
  • ADK Cyber@ADKCyber
    Patch

    CVE-2026-12806 (CVSS 9.0) impacts Edimax BR-6478AC V2 routers via the POST request handler. Review devices and apply patches if in use. http://adkcyber.com via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability https://t.co/WuLSp2xC9y

    Post summary

    AdkCyber announces a high‑severity (CVSS 9.0) CVE affecting Edimax BR‑6478AC V2 routers and urges users to review devices and apply available patches.

    0000038
    93 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-12806 A vulnerability has been found in Edimax BR-6478AC V2 1.23. The impacted element is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey of the componen… https://www.cve.org/CVERecord?id=CVE-2026-12806 ----- Traducción: CVE-2026-12806 Se … http://infoflow.cloud`

    Post summary

    The message announces CVE‑2026‑12806, describing a vulnerability in the formWlSiteSurvey function of Edimax BR‑6478AC V2 1.23, but does not provide a PoC, exploit code, or mitigation information.

    0000027
    88 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-12806 A vulnerability has been found in Edimax BR-6478AC V2 1.23. The impacted element is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey of the componen… https://www.cve.org/CVERecord?id=CVE-2026-12806

    Post summary

    A brief notice indicates the existence of CVE‑2026‑12806 in Edimax firmware, but no technical details or exploit information are supplied.

    00000738
    57.7K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-12806 Buffer Overflow in Edimax BR-6478AC V2 1.23 POST Request Handler https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-12806

    Post summary

    The entry discloses CVE-2026-12806 as a buffer overflow vulnerability in the Edimax BR-6478AC V2 1.23 POST request handler, referenced via a Vulmon link.

    0000065
    4.1K followersView on X
  • VulDB 🛡@vuldb
    Disclosure

    We have just added an important vulnerability affecting Edimax BR-6478AC V2 (CVE-2026-12806) https://vuldb.com/vuln/372600

    Post summary

    The text announces the CVE-2026-12806 vulnerability for the Edimax BR‑6478AC V2 and includes a link to a vulnerability database entry, without providing additional technical details or patch information.

    0000064
    2.2K followersView on X

Explore more