Home / Vulnerability Intelligence / CVE-2026-4188

CVE-2026-4188 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: March 16, 2026

Published: March 16, 2026Updated: March 16, 2026Remote Exploitable

Overview

A security flaw has been discovered in D-Link DIR-619L 2.06B01. The affected element is the function formSchedule of the file /goform/formSchedule of the component boa. Performing a manipulation of the argument curTime results in stack-based buffer overflow. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. This vulnerability only affects products that are no longer supported by the maintainer.

Severity & Score

Severity: High

CVSS Score: 8.8

EPSS Score: 4.5%(Probability of exploitation in next 30 days)

References

Social Media Activity(2 posts)

Offensive Sequence

@offseq

Mar 16, 2026

CVE-2026-4188: HIGH severity stack-based buffer overflow in D-Link DIR-619L (2.06B01). Allows remote, unauthenticated RCE. Device is unsupported — replace or strictly isolate! Exploit is public. More: https://radar.offseq.com/threat/cve-2026-4188-stack-based-buffer-overflow-in-d-lin-4643e6f2 #OffSeq #Vuln #DLink #InfoSec

View original post

Offensive Sequence

@offseq

Mar 16, 2026

View original post

Related Resources

Details

CVE ID: CVE-2026-4188
Severity: High
CVSS Score: 8.8
Status: unconfirmed
EPSS: 4.5%
Social Posts: 2

CWE

CWE-119

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

4.5%Probability of exploitation in the next 30 days