CVE-2026-6012: high-severity vulnerability in D-Link DIR-513
D-Link DIR-513 POST Request formSetPassword buffer overflow
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
41Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 8.7epss 2.9%
A security vulnerability has been detected in D-Link DIR-513 1.10. This affects the function formSetPassword of the file /goform/formSetPassword of the component POST Request Handler. The manipulation of the argument curTime leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Affected products
D-Link · DIR-513public PoCs found — 1
cve_referencelavender-bicycle-a5a.notion.site/D-Link-DIR-513-formSetPassword-33153a41781f806e9a3cf63a5a9091ac?source=copy_linkunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — D-Link DIR-513
In the same product, most dangerous first.
CVE-2025-8159HIGHD-Link DIR-513 HTTP POST Request formLanguageChange stack-based overflowEPSS 20.6%CVE-2025-8184HIGHD-Link DIR-513 HTTP POST Request formSetWanL2TPtriggers formSetWanL2TPcallback stack-based overflowEPSS 15.4%CVE-2025-7945HIGHD-Link DIR-513 formSetWanDhcpplus buffer overflowEPSS 7.1%CVE-2026-4465MEDIUMD-Link DIR-513 formSysCmd os command injectionEPSS 3.6%CVE-2025-10792HIGHD-Link DIR-513 formWPS buffer overflowEPSS 3.4%CVE-2025-8168HIGHD-Link DIR-513 formSetWanPPPoE websAspInit buffer overflowEPSS 2.2%