CVE-2026-129353

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-129353", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-11-14T06:37:47.711Z", "datePublished": "2026-11-14T23:15:19.934Z", "dateUpdated": "2026-11-14T23:15:19.934Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-11-14T23:15:19.934Z"}, "title": "D-Link DIR-600L authentication.cgi authenticationcgi_main stack-based overflow", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-121", "lang": "en", "description": "Stack-based Buffer Overflow"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-119", "lang": "en", "description": "Memory Corruption"}]}], "affected": [{"vendor": "D-Link", "product": "DIR-600L", "versions": [{"version": "2.17", "status": "affected"}, {"version": "2.17b02", "status": "affected"}], "cpes": ["cpe:2.3:h:d-link:dir-600l:*:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was detected in D-Link DIR-600L 2.17/2.17b02. Affected by this vulnerability is the function authenticationcgi_main of the file authentication.cgi. Performing a manipulation of the argument id/password results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 10, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P", "baseSeverity": "CRITICAL"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 10, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R", "baseSeverity": "CRITICAL"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 10, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R", "baseSeverity": "CRITICAL"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 10, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR"}}], "timeline": [{"time": "2026-11-14T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-11-14T01:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-11-14T07:43:20.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "ruanyi (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/vuln/437416", "name": "VDB-437416 | D-Link DIR-600L authentication.cgi authenticationcgi_main stack-based overflow", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/437416/cti", "name": "VDB-437416 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-129353", "name": "CVE-2026-129353 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/1043523", "name": "Submit #1043523 | D-Link DIR-600L 2.17b02 Stack-based Buffer Overflow", "tags": ["third-party-advisory"]}, {"url": "https://github.com/ruanyi101/router-firmware-security-advisories/blob/main/router-firmware-GitHub-advisories/advisories/D-Link-DIR-600L-authentication-cgi.md", "tags": ["exploit"]}, {"url": "https://www.dlink.com/", "tags": ["product"]}], "x_generator": ["VulDB PVTS v202611"]}}}

{}

{}

{}

{}