CVE-2021-26709: D-Link DSL-320b-d1

Critical severity, CVSS 9.8. EPSS: 40.1% chance of exploitation in the next 30 days.

D-Link DSL-320B-D1 devices through EU_1.25 are prone to multiple Stack-Based Buffer Overflows that allow unauthenticated remote attackers to take over a device via the login.xgi user and pass parameters. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

Affected products

• D-Link DSL-320b-d1: up to and including eu_1.25

Published 2021-04-07. Last modified 2026-06-17.