CVE-2026-129353

Description

A vulnerability was detected in D-Link DIR-600L 2.17/2.17b02. Affected by this vulnerability is the function authenticationcgi_main of the file authentication.cgi. Performing a manipulation of the argument id/password results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://vuldb.com/vuln/437416 ↗
• https://vuldb.com/vuln/437416/cti ↗
• https://vuldb.com/cve/CVE-2026-129353 ↗
• https://vuldb.com/submit/1043523 ↗
• https://github.com/ruanyi101/router-firmware-security-advisories/blob/main/router-firmware-GitHub-advisories/advisories/D-Link-DIR-600L-authentication-cgi.md ↗
• https://www.dlink.com/ ↗