CVE-2026-5982

HIGH

D-Link DIR-605L POST Request formAdvNetwork buffer overflow

Title source: cna

Description

A vulnerability was found in D-Link DIR-605L 2.13B01. This vulnerability affects the function formAdvNetwork of the file /goform/formAdvNetwork of the component POST Request Handler. Performing a manipulation of the argument curTime results in buffer overflow. Remote exploitation of the attack is possible. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.

References (5)

[Vdb Entry, Technical Description] https://vuldb.com/vuln/356536

[Signature, Permissions Required] https://vuldb.com/vuln/356536/cti

[Third Party Advisory] https://vuldb.com/submit/791855

[Exploit] https://lavender-bicycle-a5a.notion.site/D-Link-DIR-605L-formAdvNetwork-33153a41781f80f9a47bd5e073fc00ae?source=copy_link

[Product] https://www.dlink.com/

Scores

CVSS v3 8.8

EPSS 0.0003

EPSS Percentile 9.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

Details

CWE

CWE-119 CWE-120

Status published

Products (1)

D-Link/DIR-605L 2.13B01

Published Apr 09, 2026

Tracked Since Apr 10, 2026