CVE-2026-5979
HIGHD-Link DIR-605L POST Request formVirtualServ buffer overflow
Title source: cnaDescription
A vulnerability was detected in D-Link DIR-605L 2.13B01. Affected by this vulnerability is the function formVirtualServ of the file /goform/formVirtualServ of the component POST Request Handler. The manipulation of the argument curTime results in buffer overflow. The attack can be launched remotely. The exploit is now public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
References (5)
Core 5
Core References
Vdb Entry, Technical Description vdb-entry
technical-description
VDB-356533 | D-Link DIR-605L POST Request formVirtualServ buffer overflow
https://vuldb.com/vuln/356533
Signature, Permissions Required signature
permissions-required
VDB-356533 | CTI Indicators (IOB, IOC, IOA)
https://vuldb.com/vuln/356533/cti
Third Party Advisory third-party-advisory
Submit #791852 | D-Link DIR-605L D-Link DIR-605L 2.13B01 BETA Buffer Overflow
https://vuldb.com/submit/791852
Exploit exploit
https://lavender-bicycle-a5a.notion.site/D-Link-DIR-605L-formVirtualServ-33153a41781f80b496e1de206077bc7e?source=copy_link
Product product
https://www.dlink.com/
Scores
CVSS v3
8.8
EPSS
0.0068
EPSS Percentile
47.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
total
Details
CWE
CWE-119
CWE-120
Status
published
Products (2)
D-Link/DIR-605L
2.13B01
dlink/dir-605l_firmware
2.13b01
Published
Apr 09, 2026
Tracked Since
Apr 10, 2026