{"affected":[{"product":"DIR-600L","source":"CNA: VulDB","vendor":"D-Link","versions":[{"status":"affected","version":"2.17"},{"status":"affected","version":"2.17b02"}]}],"cveId":"CVE-2026-129353","cwes":["CWE-121","CWE-119"],"description":"A vulnerability was detected in D-Link DIR-600L 2.17/2.17b02. Affected by this vulnerability is the function authenticationcgi_main of the file authentication.cgi. Performing a manipulation of the argument id/password results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: VulDB","url":"https://github.com/ruanyi101/router-firmware-security-advisories/blob/main/router-firmware-GitHub-advisories/advisories/D-Link-DIR-600L-authentication-cgi.md"}],"kev":null,"metrics":[{"score":10,"severity":"critical","source":"CNA: VulDB","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P","version":"4.0"},{"score":10,"severity":"critical","source":"CNA: VulDB","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R","version":"3.1"},{"score":10,"severity":"critical","source":"CNA: VulDB","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R","version":"3.0"},{"score":10,"severity":"critical","source":"CNA: VulDB","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR","version":"2.0"}],"modifiedAt":1794698119934,"publishedAt":1794698119934,"references":[{"source":"CNA: VulDB","tags":["vdb-entry","technical-description"],"url":"https://vuldb.com/vuln/437416"},{"source":"CNA: VulDB","tags":["signature","permissions-required"],"url":"https://vuldb.com/vuln/437416/cti"},{"source":"CNA: VulDB","tags":["third-party-advisory"],"url":"https://vuldb.com/cve/CVE-2026-129353"},{"source":"CNA: VulDB","tags":["third-party-advisory"],"url":"https://vuldb.com/submit/1043523"},{"source":"CNA: VulDB","tags":["exploit"],"url":"https://github.com/ruanyi101/router-firmware-security-advisories/blob/main/router-firmware-GitHub-advisories/advisories/D-Link-DIR-600L-authentication-cgi.md"},{"source":"CNA: VulDB","tags":["product"],"url":"https://www.dlink.com/"}],"remediation":[],"revision":"aa61654a3e2a5233294ae56a62fac8780a2f527be1de88e3dfa49c0272095609","sources":[{"modifiedAt":1794698119934,"name":"CNA: VulDB","retrievedAt":1794701301308,"url":"https://www.cve.org/CVERecord?id=CVE-2026-129353"}],"ssvc":null,"status":"published","title":"D-Link DIR-600L authentication.cgi authenticationcgi_main stack-based overflow","updatedAt":1794701301308}