https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-14094.htmlhttps://patchthecve.com/cve/CVE-2025-14094.htmlSun, 18 Oct 2026 14:10:00 +0000MEDIUM 4.7: A flaw has been found in Edimax BR-6478AC V3 1.0.15. The affected element is the function sub_44CCE4 of the file /boafrm/formSysCmd. This manipulation of the argument sysCmd causes os command injection. The attack may be initiated remotely. The exploit has been published and may be used. The vendor https://patchthecve.com/cve/CVE-2025-14093.htmlhttps://patchthecve.com/cve/CVE-2025-14093.htmlSun, 18 Oct 2026 14:10:00 +0000MEDIUM 4.7: A vulnerability was detected in Edimax BR-6478AC V3 1.0.15. Impacted is the function sub_416990 of the file /boafrm/formTracerouteDiagnosticRun. The manipulation of the argument host results in os command injection. The attack can be launched remotely. The exploit is now public and may be used. The https://patchthecve.com/cve/CVE-2025-14092.htmlhttps://patchthecve.com/cve/CVE-2025-14092.htmlSun, 18 Oct 2026 14:10:00 +0000MEDIUM 4.7: A security vulnerability has been detected in Edimax BR-6478AC V3 1.0.15. This issue affects the function sub_416898 of the file /boafrm/formDebugDiagnosticRun. The manipulation of the argument host leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed phttps://patchthecve.com/cve/CVE-2025-28145.htmlhttps://patchthecve.com/cve/CVE-2025-28145.htmlWed, 17 Jun 2026 09:04:36 +0000MEDIUM 6.5: Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via partition in /boafrm/formDiskFormat.https://patchthecve.com/cve/CVE-2025-28144.htmlhttps://patchthecve.com/cve/CVE-2025-28144.htmlWed, 17 Jun 2026 09:04:36 +0000MEDIUM 6.5: Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a stack overflow vlunerability via peerPin parameter in the formWsc function.https://patchthecve.com/cve/CVE-2025-28143.htmlhttps://patchthecve.com/cve/CVE-2025-28143.htmlWed, 17 Jun 2026 09:04:36 +0000MEDIUM 6.5: Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3_1.0.15 was discovered to contain a command injection vulnerability via the groupname at the /boafrm/formDiskCreateGroup.https://patchthecve.com/cve/CVE-2025-28142.htmlhttps://patchthecve.com/cve/CVE-2025-28142.htmlWed, 17 Jun 2026 09:04:36 +0000MEDIUM 6.5: Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3_1.0.15 was discovered to contain a command injection vulnerability via the foldername in /boafrm/formDiskCreateShare.https://patchthecve.com/cve/CVE-2025-28146.htmlhttps://patchthecve.com/cve/CVE-2025-28146.htmlWed, 17 Jun 2026 09:04:36 +0000CRITICAL 9.8: Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via fota_url in /boafrm/formLtefotaUpgradeQuectel