CVE-2026-1705: D-Link DSL-6641K Web ad_virtual_server_vdsl cross site scripting

Published Jan 30, 2026

Updated

A vulnerability was detected in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function advirtualservervdsl of the component Web Interface. Performing a manipulation of the argument Name results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used.

Affected Software

1 affected component

D-Link DSL-6641K

Event History

Jan 30, 2026

CVE Published

via MITRE·09:32 PM

Data Sourced

via MITRE·09:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-1705?

CVE-2026-1705 is classified as a serious security vulnerability due to its potential for cross-site scripting attacks.

How do I fix CVE-2026-1705?

To fix CVE-2026-1705, ensure that all input fields in the web interface are properly sanitized and validated.

What systems are affected by CVE-2026-1705?

CVE-2026-1705 affects the D-Link DSL-6641K model running N8.TR069.20131126 firmware.

What type of attack does CVE-2026-1705 enable?

CVE-2026-1705 enables cross-site scripting (XSS) attacks that can compromise the security of users accessing the web interface.

Can CVE-2026-1705 be exploited remotely?

Yes, CVE-2026-1705 can be exploited remotely if an attacker manipulates the web interface input without proper security measures in place.