BaselineWatch
Desk

CVE-2026-113736

8.9 high SSVC exploitation: poc Deferred

A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function login_prepare_hnap of the file etc/defnodes/defaultvalue.xml of the component HNAP Login. The manipulation of the argument Password leads to empty password in configuration file. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Fix

Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.

Change history 2

  1. StatusReceived → DeferredNVD modified 2026-10-21 14:26
  2. First seenCVSS 8.9NVD modified 2026-10-21 01:17

Affected (CPE criteria) 0

NVD has not attached CPE configurations yet.

References 7