CVE-2026-5982 is a buffer overflow vulnerability in the D-Link DIR-605L router (firmware version 2.13B01), specifically in the formAdvNetwork POST request handler where the curTime parameter lacks proper input validation. This vulnerability affects an end-of-life product that is no longer supported by D-Link. The vulnerability presents a high severity risk with a CVSS score of 8.8, featuring network-based remote exploitation requiring only low privileges and no user interaction. Successful exploitation could grant attackers complete compromise of confidentiality, integrity, and availability on affected systems. Public exploit code is available and the vulnerability poses a tangible exploitation risk, though current community attention appears limited as indicated by its inactive status on the KEV catalog and low EPSS score. Organizations should prioritize patching or decommissioning affected DIR-605L devices to mitigate exposure.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.13b01CPE matchmatch criteria | cpe:2.3:o:dlink:dir-605l_firmware:2.13b01:*:*:*:*:*:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.