Which versions of D-Link are affected by CVE-2026-5984?

A buffer overflow vulnerability in D-Link DIR-605L routers (firmware 2.13B01) allows authenticated users to execute arbitrary code through malformed POST requests, creating a critical insider threat…

How to fix or mitigate CVE-2026-5984?

Within 24 hours: Inventory all D-Link DIR-605L devices in production and segment them to restricted network zones; document any business justification for continued use. Within 7 days: Implement network-based access controls limiting authenticated administrative access to the device management interfaces and restrict POST requests to /goform/formSetLog; test controls do not disrupt legitimate operations. Within 30 days: Develop and execute a decommissioning plan to replace DIR-605L units with supported, patched router models; prioritize devices with internet-facing management interfaces.

D-Link CVE-2026-5984

Q: What is the CVSS score of CVE-2026-5984?

CVE-2026-5984 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-21223 HIGH

Buffer Overflow (CWE-119)

2026-04-09 cna@vuldb.com

GHSA-vrqw-grr3-6x6h

D-Link Buffer Overflow

7.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Apr 09, 2026 - 22:22 euvd

EUVD-2026-21223

Analysis Generated

Apr 09, 2026 - 22:22 vuln.today

CVE Published

Apr 09, 2026 - 22:16 nvd

HIGH 7.4

DescriptionCVE.org

A vulnerability was identified in D-Link DIR-605L 2.13B01. Impacted is the function formSetLog of the file /goform/formSetLog of the component POST Request Handler. The manipulation of the argument curTime leads to buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.

AnalysisAI

Buffer overflow in D-Link DIR-605L 2.13B01 router allows authenticated remote attackers to achieve code execution via POST request manipulation. The formSetLog function in /goform/formSetLog improperly handles the curTime parameter, enabling memory corruption. Publicly available exploit code exists. This end-of-life product receives no vendor support or security updates.

Technical ContextAI

CWE-119 buffer overflow in formSetLog function within POST Request Handler. Attack vector exploits insufficient input validation on curTime parameter during POST processing. CVSS 4.0 vector indicates network-accessible, low-complexity attack requiring low-privileged authentication (PR:L), yielding high confidentiality/integrity/availability impact on vulnerable component.

RemediationAI

No vendor-released patch identified at time of analysis. D-Link has formally discontinued DIR-605L with no security support (https://www.dlink.com/). Primary mitigation: immediately retire and replace affected hardware with currently supported router model from active product line. Interim risk reduction: disable remote administration interfaces, restrict administrative access to trusted internal IP addresses only, implement network segmentation to isolate device, monitor for anomalous POST requests to /goform/formSetLog. Organizations must prioritize hardware replacement due to end-of-life status and publicly available exploit code.