CVE-2026-5815 — Improper Restriction of Operations within the Bounds of a Memory Buffer in D-link Dir-645

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory BufferCWE-121 — Stack-based Buffer Overflow4 documents4 sources
Severity
7.4HIGHNVD
EPSS
0.1%
top 73.75%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
D-link Dir-645
Timeline
PublishedApr 9
Latest updateApr 11

Description

A vulnerability was detected in D-Link DIR-645 1.01/1.02/1.03. Impacted is the function hedwigcgi_main of the file /cgi-bin/hedwig.cgi. The manipulation results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages1 packages

▶CVEListV5d-link/dir-6451.01, 1.02, 1.03+2

🔴Vulnerability Details

3
VulDB
D-Link DIR-645 1.01/1.02/1.03 /cgi-bin/hedwig.cgi hedwigcgi_main stack-based overflow (EUVD-2026-20809 / CNNVD-202604-2172)↗2026-04-11
▶
GHSA
GHSA-84j4-8w5h-98h3: A vulnerability was detected in D-Link DIR-645 1↗2026-04-09
▶
CVEList
D-Link DIR-645 hedwig.cgi hedwigcgi_main stack-based overflow↗2026-04-08
▶
CVE-2026-5815 — D-link Dir-645 vulnerability | cvebase