Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A flaw has been found in Edimax EW-7478APC 1.04. This issue affects the function formUSBAccount of the file /goform/formUSBAccount of the component POST Request Handler. This manipulation of the argument UserName/Password causes buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-30 | 1 | Disclosure1 |
| 2026-07-01 | 1 | Patch1 |
🚨 HIGH: CVE-2026-13582 (CVSS 8.8) - Buffer overflow in Edimax EW-7478APC 1.04 routers. Remote exploit published. Affects formUSBAccount function. Vendor unresponsive. Patch/replace immediately. #CVE #PatchNow #ThreatIntel https://t.co/IgaWKsQLX6
Post summary
The tweet announces that a remote exploit for CVE-2026-13582 is available and urges users to patch or replace affected Edimax routers immediately.
#CVE-2026-13582 - Critical buffer overflow in #Edimax EW-7478APC 1.04. Remote exploitation via UserName/Password args in formUSBAccount. #CVSS 8.8. Vendor unresponsive. No patch available. Isolate affected devices immediately. #CVE #cybersecurity #infosec More: https://www.valtersit.com/cve/CVE-2026-13582
Post summary
The post announces a newly disclosed critical buffer overflow in Edimax EW-7478APC 1.04, notes the lack of a vendor patch, and advises immediate device isolation.