CVE-2026-5815 - Vulnerability Analysis

Overview

D-Link DIR-645 1.01/1.02/1.03 contains a stack-based buffer overflow caused by manipulation in hedwigcgi_main function of /cgi-bin/hedwig.cgi, letting remote attackers execute arbitrary code, exploit requires no special privileges.

Severity & Score

Impact

Remote attackers can execute arbitrary code, potentially leading to full system compromise.

Mitigation

Update to the latest supported version or replace the device as it is no longer supported.

References

• https://github.com/Pers1st0/CVE/blob/main/stack-based%20buffer%20overflow%20vulnerability%20exists%20in%20the%20hedwig.cgi%20of%20D-Link%20DIR-645.md
• https://github.com/Pers1st0/CVE/blob/main/stack-based%20buffer%20overflow%20vulnerability%20exists%20in%20the%20hedwig.cgi%20of%20D-Link%20DIR-645.md#poc
• https://vuldb.com/submit/788298
• https://vuldb.com/vuln/356263
• https://vuldb.com/vuln/356263/cti
• https://www.dlink.com/

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner