PT-2026-5462 · D Link · Dsl-6641K

Tian · Publicado 2026-01-30 · Atualizado 2026-01-31 · CVE-2026-1705

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:N/AC:L/Au:M/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions D-Link DSL-6641K version N8.TR069.20131126

Description A flaw exists within the Web Interface component of the device, specifically in the ad virtual server vdsl function. Manipulating the Name argument can lead to cross site scripting. This issue is remotely exploitable, and details about the exploit are publicly available.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Code Injection

Enumeração de Fraquezas

CWE-79

CWE-94

Identificadores relacionados

CVE-2026-1705

Produtos afetados

Dsl-6641K

Referências · 8

• 🔥 https://tzh00203.notion.site/D-Link-DSL6641K-version-N8-TR069-20131126-XSS-via-ad_virtual_server_vdsl-Configuration-2eeb5c52018a805d97adfb23dfec39c9?source=copy_link · Exploit
• https://t.me/CVEtracker/43345 · Publicação no Telegram
• https://vuldb.com/?id.343510 · Nota
• https://dlink.com · Nota
• https://twitter.com/CVEnew/status/2017362380670517745 · Publicação no Twitter
• https://vuldb.com/?ctiid.343510 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-1705 · Nota de Segurança
• https://vuldb.com/?submit.742421 · Nota