A vulnerability was identified in Edimax BR-6478AC 1.23. Affected by this vulnerability is the function formPPPoESetup of the file /goform/formPPPoESetup of the…

A stack-based buffer overflow vulnerability (CVE-2026-10125) was identified in Edimax BR-6478AC router version 1.23. The vulnerability affects the formPPPoESetup function in the POST Request Handler component, specifically through manipulation of the pppUserName argument. The attack can be initiated remotely and exploits are publicly available. This vulnerability poses a high risk as it allows remote attackers to potentially execute arbitrary code on affected devices through buffer overflow exploitation.