CVE-2026-5024

CWE-119 — Buffer OverflowCWE-121 — Stack-based Buffer OverflowCWE-787 — Out-of-bounds Write3 documents3 sources
Severity
7.4HIGH
EPSS
0.0%
top 90.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
D-link Dir-513Dlink Dir-513 Firmware
Timeline
PublishedMar 29

Description

A vulnerability was found in D-Link DIR-513 1.10. This issue affects the function formSetEmail of the file /goform/formSetEmail. Performing a manipulation of the argument curTime results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5d-link/dir-5131.10

🔴Vulnerability Details

2
CVEList
D-Link DIR-513 formSetEmail stack-based overflow↗2026-03-29
▶
GHSA
GHSA-f739-9xv4-c36c: A vulnerability was found in D-Link DIR-513 1↗2026-03-29
▶
CVE-2026-5024 (HIGH CVSS 7.4) | A vulnerability was found in D-Link | cvebase.io