PT-2026-26619 · D Link · Dir-513

Attackinglin · Published 2026-03-20 · Updated 2026-03-22 · CVE-2026-4486

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.10

Description A stack-based buffer overflow exists in the Web Service component of D-Link DIR-513 version 1.10. The issue is located in the formEasySetPassword function within the /goform/formEasySetPassword file. Manipulation of the curTime argument can trigger the overflow. This issue can be exploited remotely and an exploit has been made public. The vulnerability affects products that are no longer supported by the maintainer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-787

CWE-119

Related Identifiers

CVE-2026-4486

Affected Products

Dir-513

References · 15

• 🔥 https://github.com/InfiniteLin/Lin-s-CVEdb/blob/main/DIR-513/formEasySetPassword/poc.py · Exploit
• 🔥 https://github.com/InfiniteLin/Lin-s-CVEdb/blob/main/DIR-513/formEasySetPassword/formEasySetPassword.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4486 · Security Note
• https://twitter.com/CVEnew/status/2035626977923596742 · Twitter Post
• https://twitter.com/ptdbugs/status/2035201659131887952 · Twitter Post
• https://twitter.com/CveFindCom/status/2035004207233728534 · Twitter Post
• https://twitter.com/vuldb/status/2035253379040256252 · Twitter Post
• https://twitter.com/TheHackerWire/status/2035099155954376981 · Twitter Post
• https://dlink.com · Note
• https://reddit.com/r/pwnhub/comments/1rzbz9i/urgent_cybersecurity_alert_dlink_dir513_buffer · Reddit Post
• https://vuldb.com/?id.352009 · Note
• https://vuldb.com/?submit.773566 · Note
• https://vuldb.com/?submit.773537 · Note
• https://vuldb.com/?ctiid.352009 · Note
• https://twitter.com/RedPacketSec/status/2035158531674947660 · Twitter Post