Which versions of Dir 513 are affected by CVE-2026-6013?

CVE-2026-6013 is a buffer overflow in D-Link DIR-513 routers (firmware 1.10) that allows authenticated attackers to execute arbitrary code and fully compromise affected devices.

Is there a public PoC exploit available for CVE-2026-6013?

Yes, a public proof-of-concept exploit is available for CVE-2026-6013. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-6013?

Within 24 hours: Identify all D-Link DIR-513 devices running firmware 1.10 via network inventory and disable remote administrative access. Within 7 days: Isolate affected devices to a segregated VLAN with strict egress filtering or remove from production if operationally feasible. Within 30 days: Replace DIR-513 units with vendor-supported equipment and retire remaining units from network infrastructure.

Dir 513 CVE-2026-6013

Q: What is the CVSS score of CVE-2026-6013?

CVE-2026-6013 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-21309 HIGH

Classic Buffer Overflow (CWE-120)

2026-04-10 VulDB

GHSA-3mmw-7c3p-rqxx

Buffer Overflow D-Link Dir 513 D-Link

7.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

PoC Detected

Apr 10, 2026 - 05:16 vuln.today

Public exploit code

EUVD ID Assigned

Apr 10, 2026 - 04:45 euvd

EUVD-2026-21309

Analysis Generated

Apr 10, 2026 - 04:45 vuln.today

CVE Published

Apr 10, 2026 - 04:15 nvd

HIGH 7.4

DescriptionCVE.org

A vulnerability was detected in D-Link DIR-513 1.10. This vulnerability affects the function formSetRoute of the file /goform/formSetRoute of the component POST Request Handler. The manipulation of the argument curTime results in buffer overflow. The attack may be performed from remote. The exploit is now public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

AnalysisAI

Buffer overflow in D-Link DIR-513 1.10 POST request handler allows authenticated remote attackers to achieve arbitrary code execution with high confidentiality, integrity, and availability impact. The formSetRoute function improperly validates the curTime parameter, enabling memory corruption attacks. Publicly available exploit code exists. This vulnerability affects end-of-life hardware no longer supported by D-Link, leaving no vendor remediation pathway.

Technical ContextAI

CWE-120 classic buffer overflow in formSetRoute function at /goform/formSetRoute endpoint. Insufficient bounds checking on curTime POST parameter enables stack/heap corruption. CVSS vector PR:L indicates authenticated access required. Affects discontinued D-Link DIR-513 firmware 1.10 with no active maintenance.

RemediationAI

No vendor-released patch identified at time of analysis; D-Link has discontinued support for DIR-513 hardware. Immediate device replacement recommended with current-generation router from active product line. Interim risk reduction: disable remote administration interfaces, restrict administrative access to trusted IP ranges via firewall rules, implement network segmentation to isolate device from critical assets. Do NOT expose management interface to internet. Monitor VulDB advisory at https://vuldb.com/vuln/356569 and vendor notifications at https://www.dlink.com/ for potential community firmware alternatives, though no official remediation exists for end-of-life products.