CVE-2026-2055: Exposure of Sensitive Information to an Unauthorized Actor

A weakness has been identified in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The affected element is an unknown function of the component DHCP Client Information Handler. Executing a manipulation can lead to information disclosure. The attack may be launched remotely. The exploit has been made...

📄 D-Link DIR-825 Rev.B 2.10 Buffer Overflow

D-Link DIR-825 Rev.B versions 2.10 and below proof of concept stack buffer overflow denial of service exploit. Exploit Title: D-Link DIR-825 Rev.B 2.10 - Stack Buffer Overflow DoS Google Dork: N/A Date: 2025-09-25 Exploit Author: Beatriz Fresno Naumova Vendor Homepage: https://www.dlink.com/...

CVE-2026-1744

A vulnerability was found in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function doSubmitPPP of the file sppppoeuser.js. The manipulation of the argument Username results in cross site scripting. The attack may be launched remotely. The exploit has been made public and coul...

The vulnerability in the embedded web server boa (/boafrm/formLtefotaUpgradeFibocom) of D-Link’s DWR-M961 router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the embedded web server boa /boafrm/formLtefotaUpgradeFibocom of D-Link DWR-M961 router microprogramming software is related to the failure to eliminate special elements during the processing of the fotaurl parameter. Exploiting this vulnerability allows a remote attacker to...

The vulnerability of the sub_40AC74() function in D-link DIR-823X router microprogramming software allows a attacker to execute a brute-force attack.

The vulnerability of the sub40AC74 function in D-link DIR-823X router microprogramming software is related to an improper limitation on the number of authentication attempts. Exploiting this vulnerability could allow a remote attacker to execute a brute-force attack...

The vulnerability of the sub_4250E0() function (/boafrm/formSmsManage) in D-Link DWR-M961 router software allows a hacker to execute arbitrary commands.

The vulnerability of the sub4250E0 function /boafrm/formSmsManage of the D-Link DWR-M961 router’s microprogramming software is related to the failure to take measures to neutralize special elements during the processing of the actionvalue parameter. Exploiting this vulnerability allows a remote...

The vulnerability of the sub_4298C0() function in D-Link DCS700l microprogrammed camera software allows a intruder to execute arbitrary commands.

The vulnerability of the sub4298C0 function in D-Link DCS700l microprogrammed camera software is related to the lack of measures taken to neutralize special elements during the processing of the LightSensorControl parameter. Exploiting this vulnerability allows a remote attacker to execute...

CVE-2026-1744

A vulnerability was found in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function doSubmitPPP of the file sppppoeuser.js. The manipulation of the argument Username results in cross site scripting. The attack may be launched remotely. The exploit has been made public and coul...

CVE-2026-1744

A vulnerability was found in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function doSubmitPPP of the file sppppoeuser.js. The manipulation of the argument Username results in cross site scripting. The attack may be launched remotely. The exploit has been made public and coul...

CVE-2026-1744 D-Link DSL-6641K sp_pppoe_user.js doSubmitPPP cross site scripting

A vulnerability was found in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function doSubmitPPP of the file sppppoeuser.js. The manipulation of the argument Username results in cross site scripting. The attack may be launched remotely. The exploit has been made public and coul...

EUVD-2026-5152

A vulnerability was found in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function doSubmitPPP of the file sppppoeuser.js. The manipulation of the argument Username results in cross site scripting. The attack may be launched remotely. The exploit has been made public and coul...

CVE-2026-1744 D-Link DSL-6641K sp_pppoe_user.js doSubmitPPP cross site scripting

A vulnerability was found in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function doSubmitPPP of the file sppppoeuser.js. The manipulation of the argument Username results in cross site scripting. The attack may be launched remotely. The exploit has been made public and coul...

CVE-2026-1744

CVE-2026-1744 affects D-Link DSL-6641K (N8.TR069.20131126). The vulnerability is in the doSubmitPPP function within sp_pppoe_user.js, where manipulating the Username parameter yields cross-site scripting. Exploitation can be remote, and multiple sources note the exploit is public. Remediation det...

D-Link DIR-825 Rev.B 2.10 - Stack Buffer Overflow (DoS)

Exploit Title: D-Link DIR-825 Rev.B 2.10 - Stack Buffer Overflow DoS Google Dork: N/A Date: 2025-09-25 Exploit Author: Beatriz Fresno Naumova Vendor Homepage: https://www.dlink.com/ Software Link: https://tsd.dlink.com.tw/downloads2008detail.asp Version: DIR-825 Rev.B = 2.10 Tested on: DIR-825...

CVE-2026-1744: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function doSubmitPPP of the file sppppoeuser.js. The manipulation of the argument Username results in cross site scripting. The attack may be launched remotely. The exploit has been made public and coul...

D-Link DSL-6641K 代码注入漏洞

The D-Link DSL-6641K is a router produced by D-Link Corporation. The D-Link DSL-6641K N8.TR069.20131126 version has a code injection vulnerability. This vulnerability stems from incorrect handling of the parameter “Username” in the function “doSubmitPPP” within the file “sppppoeuser.js”, which ma...

PT-2026-5603

Name of the Vulnerable Software and Affected Versions D-Link DSL-6641K N8.TR069.20131126 Description A security issue exists in D-Link DSL-6641K N8.TR069.20131126 related to the doSubmitPPP function within the sp pppoe user.js file. Manipulation of the Username argument can lead to cross site...

CVE-2026-1705

A vulnerability was detected in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function advirtualservervdsl of the component Web Interface. Performing a manipulation of the argument Name results in cross site scripting. It is possible to initiate the attack remotely. The exploi...

CVE-2026-1685

A vulnerability was identified in D-Link DIR-823X 250416. This vulnerability affects the function sub40AC74 of the component Login. Such manipulation leads to improper restriction of excessive authentication attempts. The attack may be performed from remote. This attack is characterized by high...

CVE-2026-1624

A security vulnerability has been detected in D-Link DWR-M961 1.1.47. The affected element is an unknown function of the file /boafrm/formLtefotaUpgradeFibocom. Such manipulation of the argument fotaurl leads to command injection. The attack can be launched remotely. The exploit has been disclose...