VulnSocial

CVE-2026-9460Disclosure

LOWCVSS 7.4 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A weakness has been identified in Edimax EW-7438RPn 1.31. This impacts the function formAccept of the file /goform/formAccept. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Back to dashboard
2.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-119CWE-121

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-05-25); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-05-25: 1Mentions · 2026-07-27: 1PoC Mentioned / Linked · 2026-07-27: 1Patch / Workaround · 2026-07-27: 1Technical Details · 2026-05-25: 1Technical Details · 2026-07-27: 105-2507-27
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets1 URL
By indicator
Classification over time
DateTotalLabels
2026-05-251
Disclosure1
2026-07-271
Patch1
Full discourse2 posts
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH: CVE-2026-9460 - Edimax EW-7438RPn router vulnerable to remote stack-based buffer overflow (CVSS 8.8). Public exploit available. Vendor unresponsive. Patch/replace affected devices immediately. #CVE #PatchNow https://t.co/F0sZQklOl4

    Post summary

    The tweet highlights a high‑severity CVE-2026-9460 affecting Edimax routers with a remote stack‑based buffer overflow, notes an existing public exploit, and urges immediate patching or device replacement.

    0000042
    96 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-9460 A weakness has been identified in Edimax EW-7438RPn 1.31. This impacts the function formAccept of the file /goform/formAccept. Executing a manipulation of the argument … https://www.cve.org/CVERecord?id=CVE-2026-9460

    Post summary

    The post announces a vulnerability (CVE‑2026‑9460) in the Edimax EW‑7438RPn, detailing the affected formAccept function, but it does not mention any PoC, exploit, or patch.

    00000168
    57.5K followersView on X

Explore more

Back to dashboard