CVE-2026-36734

EDIMAX BR-6428nS V3 1.15 is vulnerable to Command Injection. An authenticated attacker with access to the network can submit crafted input to the WLAN configuration functionality. Due to insufficient input validation, the attacker is able to execute arbitrary system commands on the device.

• CWE-77

• https://github.com/theShinigami/CVE-Disclosures/tree/main/CVE-2026-36734

Published

May 11, 2026

Last Modified

Jul 5, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-36724An uncaught exception in the /application/job/update/{id} en…6.5
• CVE-2026-36725A markdown based cross-site scripting (XSS) vulnerability in…6.1
• CVE-2026-36726An arbitrary file deletion vulnerability in the /api/delete-…5.3
• CVE-2026-36727An insecure authentication vulnerability in the /api/social-…9.1
• CVE-2026-36728A markdown based cross-site scripting (XSS) vulnerability in…5.4
• CVE-2026-3673An authenticated attacker can store a crafted tag value in _…5.4
• CVE-2026-36738U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is…6.8
• CVE-2026-3674A vulnerability was found in Freedom Factory dGEN1 up to 202…5.3
• CVE-2026-36741U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is…7.2
• CVE-2026-36742Hiseeu C90 v5.7.15 is vulnerable to Insecure Permissions. Th…6.8
• CVE-2026-36748RockRMS v16.13 and before v.17.7.0 is vulnerable to Cross Si…9
• CVE-2026-3675A vulnerability was determined in Freedom Factory dGEN1 up t…5.3