PT-2026-26918 · D Link · D-Link Dap-1320

Xiaobor123 · Published 2026-03-21 · Updated 2026-03-27 · CVE-2026-4529

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DHP-1320 version 1.00WWB04

Description A flaw exists in the SOAP Handler component, specifically within the redirect count down page function, of the D-Link DHP-1320. This issue allows for a stack-based buffer overflow, which can be triggered remotely. The exploit for this issue is publicly available. This vulnerability impacts products that are no longer supported by the maintainer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

CVE-2026-4529

Affected Products

D-Link Dap-1320

References · 16

• 🔥 https://github.com/xiaobor123/vul-finds/tree/main/vul-find-dhp1320-dlink · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4529 · Security Note
• https://vuldb.com/?submit.773932 · Note
• https://twitter.com/vuldb/status/2035626171703169453 · Twitter Post
• https://twitter.com/vuldb/status/2035263536679854303 · Twitter Post
• https://vuldb.com/?id.352317 · Note
• https://dlink.com · Note
• https://twitter.com/TheHackerWire/status/2035495986341306837 · Twitter Post
• https://vuldb.com/?ctiid.352317 · Note
• https://twitter.com/ptdbugs/status/2035685746195968121 · Twitter Post
• https://twitter.com/CVEnew/status/2035619727121502436 · Twitter Post
• https://twitter.com/cyberbivash/status/2035514924907028564 · Twitter Post
• https://twitter.com/integ_sec/status/2037541529632338040 · Twitter Post
• https://twitter.com/RedPacketSec/status/2035596714564788585 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1s08vh1/critical_buffer_overflow_vulnerability_discovered · Reddit Post