Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
A weakness has been identified in Edimax BR-6675nD 1.12. This impacts the function formWpsStart of the file /goform/formWpsStart of the component POST Request Handler. This manipulation of the argument pinCode causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-05-24 | 1 | Disclosure1 |
| 2026-05-27 | 1 | Active Exploitation1 |
It is possible to see elevated activities targeting Edimax BR-6675nD (CVE-2026-9379) https://vuldb.com/vuln/365342/cti
Post summary
Reports suggest that elevated malicious activity has been observed against Edimax BR-6675nD devices affected by CVE-2026-9379, indicating ongoing exploitation.
CVE-2026-9379 A weakness has been identified in Edimax BR-6675nD 1.12. This impacts the function formWpsStart of the file /goform/formWpsStart of the component POST Request Handler. … https://www.cve.org/CVERecord?id=CVE-2026-9379
Post summary
A weakness in the Edimax BR-6675nD 1.12 device's formWpsStart functionality has been identified, constituting a vulnerability disclosure.