CVE-2026-6014

CVE-2026-6014 is a buffer overflow vulnerability in D-Link DIR-513 firmware version 1.10, specifically within the formAdvanceSetup POST request handler. The flaw exists in the webpage parameter of the /goform/formAdvanceSetup function and affects only end-of-life products no longer receiving vendor support. The vulnerability carries a HIGH severity rating with a CVSS score of 8.8, exploitable remotely over the network by authenticated users with low attack complexity. Successful exploitation results in complete system compromise, including high-impact confidentiality, integrity, and availability breaches. While proof-of-concept exploit code has been publicly released, the vulnerability is not currently listed on the CISA Known Exploited Vulnerabilities catalog and shows minimal community engagement. The extremely low EPSS score of 0.0005 indicates negligible real-world exploitation activity at this time, though the published exploit code presents a latent risk if threat actors choose to leverage it.