Vulnerability Description
A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function login_prepare_hnap of the file etc/defnodes/defaultvalue.xml of the component HNAP Login. The manipulation of the argument Password leads to empty password in configuration file. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://github.com/XueDugu/dlink-dhp-w610av-empty-admin-password-evidence
- https://github.com/XueDugu/dlink-dhp-w610av-empty-admin-password-evidence/blob/m
- https://vuldb.com/cve/CVE-2026-113736
- https://vuldb.com/submit/1015789
- https://vuldb.com/vuln/422892
- https://vuldb.com/vuln/422892/cti
- https://www.dlink.com/
FAQ
What is CVE-2026-113736?
CVE-2026-113736 is a vulnerability with a CVSS score of 9.8 (CRITICAL). A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function login_prepare_hnap of the file etc/defnodes/defaultvalue.xml of the component HNAP Login. The manipu...
How severe is CVE-2026-113736?
CVE-2026-113736 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-113736?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.