A vulnerability was identified in D-Link DSL-2740R EU_01.15. Impacted is an unknown function of the component Wireless Setup Section. Such manipulation of the argument Wireless Network Name leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and might be used.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 1.9 · dlinkNVD modified 2026-10-26 00:10
Affected (CPE criteria) 1
cpe:2.3:o:dlink:dsl-2740r_firmware:eu_01.15:*:*:*:*:*:*:*
References 4
- https://vuldb.com/submit/797896 Third Party Advisory, VDB Entry
- https://vuldb.com/vuln/359607 Third Party Advisory, VDB Entry
- https://vuldb.com/vuln/359607/cti Permissions Required, VDB Entry
- https://www.dlink.com/ Product