CVE-2026-1705

1.9 lowEPSS 0.3%

Low (1.9). EPSS 0.3% chance of exploitation in the next 30 days.

A vulnerability was detected in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function ad_virtual_server_vdsl of the component Web Interface. Performing a manipulation of the argument Name results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used.

Severity

CVSS 4.0

1.9 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

CVSS 3.1

2.4 low

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 18% of CVEs (scores of 2026-10-31)
CWEs: CWE-79, CWE-94
Published: 2026-01-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://tzh00203.notion.site/D-Link-DSL6641K-version-N8-TR069-20131126-XSS-via-ad_virtual_server_vdsl-Configuration-2eeb5c52018a805d97adfb23dfec39c9?source=copy_link
https://vuldb.com/?ctiid.343510
https://vuldb.com/?id.343510
https://vuldb.com/?submit.742421
https://www.dlink.com/

Check your stack JSON