CVE-2026-113736: D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty password

Published Oct 21, 2026

Updated

A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function loginpreparehnap of the file etc/defnodes/defaultvalue.xml of the component HNAP Login. The manipulation of the argument Password leads to empty password in configuration file. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

D-Link DHP-W610AV=1.02EUb03

Event History

Oct 21, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are affected?

The affected product and version identified are D-Link DHP-W610AV devices running 1.02EUb03. The affected component is the HNAP Login functionality, specifically login_prepare_hnap in etc/defnodes/defaultvalue.xml.

Does exploitation require authentication or local access?

No. The vulnerability is remotely exploitable and is rated with no privileges required and no user interaction required.

What is the likely impact of successful exploitation?

Manipulating the Password argument can result in an empty password in the configuration file. The supplied severity vector indicates high impact to confidentiality, integrity, and availability.

Is public exploit information available?

Yes. The exploit has been publicly disclosed and may be used.

CVE-2026-113736: D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty password

Affected Software

Event History

Frequently Asked Questions

Which deployments are affected?

Does exploitation require authentication or local access?

What is the likely impact of successful exploitation?

Is public exploit information available?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

Does exploitation require authentication or local access?

What is the likely impact of successful exploitation?

Is public exploit information available?