Home / Vulnerability Intelligence / CVE-2026-4183

CVE-2026-4183 - Vulnerability Analysis

CriticalCVSS: 9.8

Last Updated: March 16, 2026

Published: March 16, 2026Updated: March 16, 2026Remote Exploitable

Overview

A security vulnerability has been detected in D-Link DIR-816 1.10CNB05. Affected is an unknown function of the file /goform/form2WlanBasicSetup.cgi of the component goahead. Such manipulation of the argument pskValue leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Severity & Score

Severity: Critical

CVSS Score: 9.8

EPSS Score: 6.1%(Probability of exploitation in next 30 days)

References

Social Media Activity(2 posts)

Offensive Sequence

@offseq

Mar 16, 2026

🔎 CVE-2026-4183 (CRITICAL, CVSS 9.3): D-Link DIR-816 (v1.10CNB05) stack buffer overflow via /goform/form2WlanBasicSetup.cgi. Exploit code public, no patch. Replace or isolate devices ASAP! https://radar.offseq.com/threat/cve-2026-4183-stack-based-buffer-overflow-in-d-lin-2982ced2 #OffSeq #CVE20264183 #IoTSecurity

View original post

Offensive Sequence

@offseq

Mar 16, 2026

View original post

Related Resources

Details

CVE ID: CVE-2026-4183
Severity: Critical
CVSS Score: 9.8
Status: unconfirmed
EPSS: 6.1%
Social Posts: 2

CWE

CWE-119

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

6.1%Probability of exploitation in the next 30 days