CVE-2026-5979

CWE-119 — Buffer OverflowCWE-120 — Classic Buffer Overflow4 documents4 sources
Severity
7.4HIGH
EPSS
0.0%
top 86.37%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
D-link Dir-605l
Timeline
PublishedApr 9
Latest updateApr 10

Description

A vulnerability was detected in D-Link DIR-605L 2.13B01. Affected by this vulnerability is the function formVirtualServ of the file /goform/formVirtualServ of the component POST Request Handler. The manipulation of the argument curTime results in buffer overflow. The attack can be launched remotely. The exploit is now public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages1 packages

▶CVEListV5d-link/dir-605l2.13B01

🔴Vulnerability Details

3
VulDB
D-Link DIR-605L 2.13B01 POST Request /goform/formVirtualServ curTime buffer overflow (EUVD-2026-21186)↗2026-04-10
▶
GHSA
GHSA-8w3p-hgjr-h6h4: A vulnerability was detected in D-Link DIR-605L 2↗2026-04-09
▶
CVEList
D-Link DIR-605L POST Request formVirtualServ buffer overflow↗2026-04-09
▶
CVE-2026-5979 (HIGH CVSS 7.4) | A vulnerability was detected in D-L | cvebase.io