CVE-2018-18636: D-Link DSL-2640t Firmware

Medium severity, CVSS 6.1. EPSS: 1.3% chance of exploitation in the next 30 days.

XSS exists in cgi-bin/webcm on D-link DSL-2640T routers via the var:RelaodHref or var:conid parameter.

Affected products

• D-Link DSL-2640t Firmware: affected versions not specified

Published 2018-10-24. Last modified 2026-06-17.