CVE-2026-5024: D-Link DIR-513 formSetEmail stack-based overflow
A vulnerability was found in D-Link DIR-513 1.10. This issue affects the function formSetEmail of the file /goform/formSetEmail. Performing a manipulation of the argument curTime results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5024?
CVE-2026-5024 is classified as a high severity vulnerability due to the potential for remote code execution through stack-based buffer overflow.
How do I fix CVE-2026-5024?
To fix CVE-2026-5024, update the D-Link DIR-513 to the latest firmware version that addresses this vulnerability.
What systems are affected by CVE-2026-5024?
CVE-2026-5024 specifically affects the D-Link DIR-513 running version 1.10.
What type of vulnerability is CVE-2026-5024?
CVE-2026-5024 is a stack-based buffer overflow vulnerability that can be exploited through improper handling of the curTime argument.
What is the vector of attack for CVE-2026-5024?
The vector of attack for CVE-2026-5024 involves sending malformed requests to the formSetEmail function in the D-Link DIR-513.