CVE-2026-1970 Edimax BR-6258n formStaDrvSetup redirect
Attackers can exploit an open redirect in the Edimax BR-6258n router's formStaDrvSetup function to redirect users to malicious sites.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-1970?
CVE-2026-1970 is a medium-severity vulnerability in Edimax BR-6258n, published on 5 Feb 2026. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
A flaw has been found in Edimax BR-6258n up to 1.18. This issue affects the function formStaDrvSetup of the file /goform/formStaDrvSetup. This manipulation of the argument submit-url causes open redirect. The attack can be initiated remotely. The exploit has been published and may be used. The vendor confirms that the affected product is end-of-life. They confirm that they "will issue a consolidated Security Advisory on our official support website." This vulnerability only affects products that are no longer supported by the maintainer.
Weakness: CWE-601
Which versions are affected by CVE-2026-1970?
It affects 1 product.
Products include Edimax Br-6258n Firmware.
How do I fix CVE-2026-1970?
No fix has been published for CVE-2026-1970 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-1970 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-1970 exists.
Sources
Also known as GHSA-7527-2rw4-v6hj.