CVE-2026-1970

A flaw has been found in Edimax BR-6258n up to 1.18. This issue affects the function formStaDrvSetup of the file /goform/formStaDrvSetup. This manipulation of the argument submit-url causes open redirect. The attack can be initiated remotely. The exploit has been published and may be used. The vendor confirms that the affected product is end-of-life. They confirm that they "will issue a consolidated Security Advisory on our official support website." This vulnerability only affects products that are no longer supported by the maintainer.

• CWE-601

• https://tzh00203.notion.site/EDIMAX-BR-6258n-v1-18-Open-Redirect-Vulnerability-in-Web-formStaDrvSetup-handler-2eeb5c52018a803bb958e4f80cdf2550?source=copy_linkExploit, Third Party Advisory
• https://vuldb.com/?ctiid.344492Permissions Required, VDB Entry
• https://vuldb.com/?id.344492Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.742734Third Party Advisory, VDB Entry

Published

Feb 5, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-19694TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial…5.5
• CVE-2026-19695Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows …5.5
• CVE-2026-19696Ixia IxVeriWave and Vector Informatik BLF file parser crashe…5.5
• CVE-2026-19697The GutenKit WordPress plugin before 2.5.0 does not sanitis…6.8
• CVE-2026-19698The GutenKit WordPress plugin before 2.5.1 does not validate…3.5
• CVE-2026-19699The GutenKit WordPress plugin before 2.5.0 does not have a …2.7
• CVE-2026-19702Improper neutralization of special elements used in an OS co…7.8
• CVE-2026-19704The Comments WordPress plugin before 7.6.66 does not valida…5.3
• CVE-2026-19708The File Manager WordPress plugin before 8.0.5 does not prev…
• CVE-2026-19709The Membership For WooCommerce WordPress plugin before 3.1.2…5.3
• CVE-2026-1971A vulnerability has been found in Edimax BR-6288ACL up to 1.…4.8
• CVE-2026-19710A vulnerability was found in SourceCodester Simple Student I…7.3