CVE-2026-36734

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-05-11 · updated 2026-07-05
Weakness: CWE-77

Description

EDIMAX BR-6428nS V3 1.15 is vulnerable to Command Injection. An authenticated attacker with access to the network can submit crafted input to the WLAN configuration functionality. Due to insufficient input validation, the attacker is able to execute arbitrary system commands on the device.

References

https://github.com/theShinigami/CVE-Disclosures/tree/main/CVE-2026-36734

Get alerted when CVE-2026-36734 or the next vulnerability affects your stack