CVE-2026-4529
D-Link DHP-1320 SOAP redirect_count_down_page stack-based overflow
- State
- Published
- Severity
- 8.7 High
- Published
- Mar 21, 2026
- Updated
- Mar 23, 2026
- Reserved
- Mar 21, 2026
Description
A vulnerability was identified in D-Link DHP-1320 1.00WWB04. This affects the function redirect_count_down_page of the component SOAP Handler. Such manipulation leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 8.8 High | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R | VulDB |
| 3.0 | 8.8 High | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R | VulDB |
| 2.0 | 9.0 High | AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
DHP-1320D-Link |
|
References
- VDB-352317 | D-Link DHP-1320 SOAP redirect_count_down_page stack-based overflowvdb-entrytechnical-description
- VDB-352317 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
- Submit #773932 | DLink dhp-1320 A1 v1.00WWB04 Stack-based Buffer Overflowthird-party-advisory
- https://github.com/xiaobor123/vul-finds/tree/main/vul-find-dhp1320-dlinkexploit
- https://www.dlink.com/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.