CVE-2025-28146

Critical · 9.8

CVSS

9.8

EPSS

11.5%

Published

Apr 4, 2025

CISA due date

—

The record

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via fota_url in /boafrm/formLtefotaUpgradeQuectel

Affected packages

Ecosystem	Package	Introduced	Fixed