What is the CVSS score of CVE-2026-3978?

CVE-2026-3978 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Dir 513 Firmware are affected by CVE-2026-3978?

A high-severity remote vulnerability exists in D-Link DIR-513 wireless routers (version 1.10) affecting an undisclosed setup wizard function, with no vendor patch currently available.

How to fix or mitigate CVE-2026-3978?

Within 24 hours: Inventory all D-Link DIR-513 1.10 devices in your environment and isolate affected units from critical network segments; document findings and notify relevant business stakeholders. Within 7 days: Implement network access controls restricting administrative access to these devices; monitor for suspicious activity targeting the /goform/formEasySetupWizard3 endpoint. Within 30 days: Develop a replacement plan for affected units; contact D-Link support for patch timeline; evaluate alternative router vendors if no patch is released within 60 days.

Dir 513 Firmware CVE-2026-3978

HIGH

Buffer Overflow (CWE-119)

2026-03-12 cna@vuldb.com

Buffer Overflow D-Link Dir 513 Firmware

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 19:57 vuln.today

CVE Published

Mar 12, 2026 - 04:16 nvd

HIGH 8.8

DescriptionCVE.org

A vulnerability was detected in D-Link DIR-513 1.10. The impacted element is an unknown function of the file /goform/formEasySetupWizard3. The manipulation of the argument wan_connected results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and may be used.

AnalysisAI

Remote code execution in D-Link DIR-513 firmware version 1.10 through a stack-based buffer overflow in the /goform/formEasySetupWizard3 endpoint allows unauthenticated attackers to achieve full system compromise over the network. The vulnerability can be exploited with minimal complexity using publicly available exploit code, and no patch is currently available to remediate the issue.

Technical ContextAI

Classified as CWE-119 (Buffer Overflow). A vulnerability was detected in D-Link DIR-513 1.10. The impacted element is an unknown function of the file /goform/formEasySetupWizard3. The manipulation of the argument wan_connected results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and may be used.

RemediationAI

Monitor vendor advisories for a patch. Enable ASLR, DEP/NX, and stack canaries where possible. Restrict network access to the affected service where possible.