CVE-2026-113736 | D-Link DHP-W610AV 1.02EUb03 HNAP Login defaultvalue.xml login_prepare_hnap password empty password

October 20, 2026 Yanac

A vulnerability was found in D-Link DHP-W610AV 1.02EUb03. It has been rated as very critical. The impacted element is the function login_prepare_hnap of the file etc/defnodes/defaultvalue.xml of the component HNAP Login. The manipulation of the argument Password leads to empty password in configuration file.

This vulnerability is documented as CVE-2026-113736. The attack can be initiated remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More