A vulnerability was found in Edimax BR-6478AC 1.23 . It has been declared as critical . Affected by this vulnerability is the function formAccept of the file /goform/formAccept of the component POST Request Handler . Such manipulation of the argument submit-url leads to command injection. This vulnerability is referenced as CVE-2026-9440 . It is possible to launch the attack remotely. Furthermore, an exploit is available. The vendor was contacted early about this disclosure but did not respond i