Approved changes feed: RSS · Atom

cpe:2.3:a:d-link:dsl-6641k:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorD Link (f324da99-07b9-589f-a800-1ce04a08f309)
ProductDsl 6641K (b94fb06f-38f6-572e-9046-bfa27d0a121b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-1744 vulnerable 2026-06-08 07:49:09.518824 D-Link DSL-6641K sp_pppoe_user.js doSubmitPPP cross site scripting
LOW (2.4)
A vulnerability was found in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function doSubmitPPP of the file sp_pppoe_user.js. The manipulation of the argument Username results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2026-02-02T04:32:08.247Z
Updated: 2026-02-23T09:14:03.054Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1705 vulnerable 2026-06-08 07:49:09.404871 D-Link DSL-6641K Web ad_virtual_server_vdsl cross site scripting
LOW (2.4)
A vulnerability was detected in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function ad_virtual_server_vdsl of the component Web Interface. Performing a manipulation of the argument Name results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used.
Published: 2026-01-30T21:32:08.548Z
Updated: 2026-02-23T09:11:22.430Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.