CVE-2026-129353

CVSS 10.0 (critical) · published 2026-11-15

A vulnerability was detected in D-Link DIR-600L 2.17/2.17b02. Affected by this vulnerability is the function authenticationcgi_main of the file authentication.cgi. Performing a manipulation of the argument id/password results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Weakness: CWE-119, CWE-121

Source: NVD CVE-2026-129353

References

• https://github.com/ruanyi101/router-firmware-security-advisories/blob/main/router-firmware-GitHub-advisories/advisories/D-Link-DIR-600L-authentication-cgi.md
• https://vuldb.com/cve/CVE-2026-129353
• https://vuldb.com/submit/1043523
• https://vuldb.com/vuln/437416
• https://vuldb.com/vuln/437416/cti
• https://www.dlink.com/

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.