Vulnerability record · CVE-2026-5981 · published 9 April 2026

CVE-2026-5981: Dlink dir-605l firmware memory buffer overflow vulnerability

Dlink · Dir 605l Firmware

A vulnerability has been found in D-Link DIR-605L 2.13B01. This affects the function formAdvFirewall of the file /goform/formAdvFirewall of the component POST Request Handler. Such manipulation of the argument curTime leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

7.4 CVSS 4.0 High EPSS 1.2% · top 33.9% CWE-119 · Memory buffer overflowCWE-120 · Classic buffer overflow

7.4CVSS 4.0 base score, v2 9.0

1.2%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

5References, 1 tagged exploit

17 Jun 2026Last modified by NVD

Description

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Dir 605l Firmware Dlink

References

Link	Tags
https://lavender-bicycle-a5a.notion.site/D-Link-DIR-605L-formAdvFirewall-33153a41781f80678733f4b12282f3fa?source=copy_li	ExploitThird Party Advisory
https://vuldb.com/submit/791854	Third Party AdvisoryVDB Entry
https://vuldb.com/vuln/356535	Third Party AdvisoryVDB Entry
https://vuldb.com/vuln/356535/cti	Permissions RequiredVDB Entry
https://www.dlink.com/	Product

Track CVE-2026-5981 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2014-8361Realtek SDK miniigd SOAP service remote code executionThe miniigd SOAP service in the Realtek SDK fails to properly validate input in a NewInternalClient request, allowing remote code execution. The flaw…KEVEPSS 100%analysed1 May 2015 7.5CVE-2021-40655D-Link DIR-605 router credential disclosure via getcfg.phpD-Link DIR-605 B2 firmware 2.01MT exposes credentials through the /getcfg.php page, which fails to enforce proper authorization. A crafted POST reque…KEVEPSS 87%analysed24 Sep 2021 9.8CVE-2023-29961Dlink dir-605l firmware out-of-bounds write vulnerabilityD-Link DIR-605L firmware version 1.17B01 BETA is vulnerable to stack overflow via /goform/formTcpipSetup,EPSS 1.2%16 May 2023 9.8CVE-2023-24348Dlink dir-605l firmware out-of-bounds write vulnerabilityD-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetACLFilter.EPSS 1.2%10 Feb 2023 9.8CVE-2023-24349Dlink dir-605l firmware out-of-bounds write vulnerabilityD-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetRoute.EPSS 1.2%10 Feb 2023 9.8CVE-2023-24350Dlink dir-605l firmware out-of-bounds write vulnerabilityD-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the config.smtp_email_subject parameter at /goform/formSetE…EPSS 1.2%10 Feb 2023 9.8CVE-2023-24351Dlink dir-605l firmware out-of-bounds write vulnerabilityD-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the FILECODE parameter at /goform/formLogin.EPSS 1.2%10 Feb 2023 9.8CVE-2023-24352Dlink dir-605l firmware out-of-bounds write vulnerabilityD-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /goform/formWPS.EPSS 1.2%10 Feb 2023

Source: NIST National Vulnerability Database (record CVE-2026-5981), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.