CVE-2026-4486 - Vulnerability Analysis

Overview

D-Link DIR-513 1.10 contains a stack-based buffer overflow caused by manipulation of the "curTime" argument in /goform/formEasySetPassword Web Service, letting remote attackers cause memory corruption, exploit requires crafted request.

Severity & Score

Impact

Remote attackers can cause memory corruption, potentially leading to denial of service or remote code execution.

Mitigation

Update to the latest supported version or replace unsupported product.

References

• https://vuldb.com/?submit.773537
• https://vuldb.com/?submit.773566
• https://www.dlink.com/
• https://github.com/InfiniteLin/Lin-s-CVEdb/blob/main/DIR-513/formEasySetPassword/formEasySetPassword.md
• https://github.com/InfiniteLin/Lin-s-CVEdb/blob/main/DIR-513/formEasySetPassword/poc.py
• https://vuldb.com/?ctiid.352009
• https://vuldb.com/?id.352009

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 20, 2026

🟠 CVE-2026-4486 - High (8.8) A vulnerability was found in D-Link DIR-513 1.10. This affects the function formEasySetPassword of the file /goform/formEasySetPassword of the component Web Service. The manipulation of the argument curTime results in stack-based buffer overflow. ... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-4486/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner