Edimax BR-6675nD POST Request formsetPPPoE buffer overflow_CVE-2026-9399

{
    "lastseen": "",
    "description": "A vulnerability was detected in Edimax BR-6675nD 1.12. This vulnerability affects the function formsetPPPoE of the file /goform/formsetPPPoE of the component POST Request Handler. Performing a manipulation of the argument pppUserName results in buffer overflow. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
    "published": "2026-05-24T21:00:13.650Z",
    "modified": "2026-05-24T21:00:13.650Z",
    "type": "cve",
    "title": "Edimax BR-6675nD POST Request formsetPPPoE buffer overflow",
    "source": "VulDB",
    "references": "https://vuldb.com/vuln/365380\nhttps://vuldb.com/vuln/365380/cti\nhttps://vuldb.com/submit/811561\nhttps://lavender-bicycle-a5a.notion.site/EDIMAX-BR-6675nD-formsetPPPoE-34b53a41781f8025abcded9e7d0734ef?source=copy_link",
    "id": "CVE-2026-9399",
    "bulletinFamily": "",
    "cwe": [
        "CWE-120",
        "CWE-119"
    ],
    "cvelist": null,
    "sourceData": "Edimax BR-6675nD 1.12",
    "sourceHref": "",
    "cvss": {
        "score": 8.7,
        "severity": "HIGH",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "BR-6675nD",
    "version": "1.12",
    "vendor": "Edimax",
    "ai_description": "Buffer overflow vulnerability in Edimax BR-6675nD via the formsetPPPoE function, allowing remote attackers to execute arbitrary code",
    "ai_severity": "High",
    "ai_vendor": "Edimax",
    "ai_product": "BR-6675nD",
    "ai_version": "1.12",
    "ai_score": 8.7
}