PT-2026-5462 · D Link · Dsl-6641K

Tian · Published 2026-01-30 · Updated 2026-01-31 · CVE-2026-1705

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:N/AC:L/Au:M/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions D-Link DSL-6641K version N8.TR069.20131126

Description A flaw exists within the Web Interface component of the device, specifically in the ad virtual server vdsl function. Manipulating the Name argument can lead to cross site scripting. This issue is remotely exploitable, and details about the exploit are publicly available.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-1705

Affected Products

Dsl-6641K

References · 8

• 🔥 https://tzh00203.notion.site/D-Link-DSL6641K-version-N8-TR069-20131126-XSS-via-ad_virtual_server_vdsl-Configuration-2eeb5c52018a805d97adfb23dfec39c9?source=copy_link · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-1705 · Security Note
• https://t.me/CVEtracker/43345 · Telegram Post
• https://vuldb.com/?id.343510 · Note
• https://dlink.com · Note
• https://twitter.com/CVEnew/status/2017362380670517745 · Twitter Post
• https://vuldb.com/?ctiid.343510 · Note
• https://vuldb.com/?submit.742421 · Note