CVE-2021-26709

CRITICAL 9.8CVE-2021-26709 · Published 07/04/2021 · updated 17/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

D-Link DSL-320B-D1 devices through EU_1.25 are prone to multiple Stack-Based Buffer Overflows that allow unauthenticated remote attackers to take over a device via the login.xgi user and pass parameters. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

References

packetstormsecurity.com/files/162133/D-Link-DSL-320B-D1-Pre-Authentication-Buffer-Overflow.html · Exploit
seclists.org/fulldisclosure/2021/Apr/15 · Mailing List
supportannouncement.us.dlink.com/announcement/publication.aspx · Vendor Advisory
dlink.com/en/security-bulletin · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free