CVE-2026-19963
Medium
Elevated severity or exploit probability.
CVSS base
7.4
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
EPSS — probability of exploitation (30 days)
2.0%
79.7th percentile
CISA KEV
Not listed
Weakness / dates
CWE-74
Published 2026-08-17 · modified 2026-08-20
CVSS breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
| Attack Vector | N | Network |
| Attack Complexity | L | Low |
| Privileges Required | L | Low |
| User Interaction | N | None |
| Scope | C | Changed |
| Confidentiality | L | Low |
| Integrity | L | Low |
| Availability | L | Low |
Timeline
- 2026-08-17 — Published (NVD)
- 2026-08-20 — Last modified (NVD)
Description
A vulnerability has been found in Edimax EW-7478APC 1.04. Affected by this issue is the function stainfo of the file /goform/stainfo. The manipulation of the argument interface leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.