CVE-2026-4188 - Vulnerability Analysis

Overview

D-Link DIR-619L 2.06B01 contains a stack-based buffer overflow caused by manipulation of the "curTime" argument in formSchedule function of /goform/formSchedule in boa component, letting remote attackers cause memory corruption, exploit requires no special privileges.

Severity & Score

Impact

Remote attackers can cause memory corruption, potentially leading to denial of service or remote code execution.

Mitigation

Update to the latest supported version or replace the device as this product is no longer maintained.

References

• https://vuldb.com/?id.351094
• https://vuldb.com/?submit.769833
• https://www.dlink.com/
• https://github.com/wudipjq/my_vuln/blob/main/D-Link7/vuln_89/89.md
• https://vuldb.com/?ctiid.351094

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 16, 2026

🟠 CVE-2026-4188 - High (8.8) A security flaw has been discovered in D-Link DIR-619L 2.06B01. The affected element is the function formSchedule of the file /goform/formSchedule of the component boa. Performing a manipulation of the argument curTime results in stack-based buffe... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-4188/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner