CVE-2026-3978: D-Link DIR-513 formEasySetupWizard3 stack-based overflow
A vulnerability was detected in D-Link DIR-513 1.10. The impacted element is an unknown function of the file /goform/formEasySetupWizard3. The manipulation of the argument wanconnected results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3978?
CVE-2026-3978 is classified as a high severity vulnerability due to the potential for remote code execution via a stack-based buffer overflow.
How do I fix CVE-2026-3978?
To mitigate CVE-2026-3978, update the D-Link DIR-513 firmware to the latest available version provided by D-Link.
What type of attack can exploit CVE-2026-3978?
CVE-2026-3978 can be exploited through remote attacks that manipulate the wan_connected argument to trigger the buffer overflow.
Which devices are affected by CVE-2026-3978?
The D-Link DIR-513 device running version 1.10 is specifically affected by CVE-2026-3978.
Is CVE-2026-3978 a known vulnerability?
Yes, CVE-2026-3978 is a recognized vulnerability documented in various cybersecurity databases and reports.