CVE-2026-1744 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was found in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function doSubmitPPP of the file sp_pppoe_user.js. The manipulati…
Medium CVSS: 4.8

CVE-2026-1744

A vulnerability was found in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function doSubmitPPP of the file sp_pppoe_user.js. The manipulation of the argument Username results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.
Vendor
Dlink
Product
Dsl-6641k Firmware
CWE
CWE-79
Yayın Tarihi
2026-02-02 05:15:59
Güncelleme
2026-02-10 17:42:33
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-79 Dsl-6641k Firmware MEDIUM Dlink 2026

Referanslar

https://tzh00203.notion.site/D-Link-DSL6641K-version-N8-TR069-20131126-XSS-via-sp_pppoe_user-js-Configuration-2eeb5c52018a80d083aaf19efbaa9130?source=copy_link https://vuldb.com/?ctiid.343675 https://vuldb.com/?id.343675 https://vuldb.com/?submit.742439 https://www.dlink.com/ https://tzh00203.notion.site/D-Link-DSL6641K-version-N8-TR069-20131126-XSS-via-sp_pppoe_user-js-Configuration-2eeb5c52018a80d083aaf19efbaa9130?source=copy_link