CVE-2018-18636

XSS exists in cgi-bin/webcm on D-link DSL-2640T routers via the var:RelaodHref or var:conid parameter.

• CWE-79

• https://cxsecurity.com/issue/WLB-2018100107Exploit, Third Party Advisory
• https://packetstormsecurity.com/files/149785/D-Link-DSL-2640T-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://cxsecurity.com/issue/WLB-2018100107Exploit, Third Party Advisory
• https://packetstormsecurity.com/files/149785/D-Link-DSL-2640T-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry

Published

Oct 24, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-18626An issue was discovered in PHPYun V4.6. There is a vulnerabi…
• CVE-2018-18628An issue was discovered in Pippo 1.11.0. The function Serial…
• CVE-2018-18629An issue was discovered in the Keybase command-line client b…
• CVE-2018-18630A vulnerability was found in McKesson Cardiology product 13.…7.8
• CVE-2018-18631mailboxd component in Synacor Zimbra Collaboration Suite 8.6…
• CVE-2018-18635www/guis/admin/application/controllers/UserController.php in…
• CVE-2018-18638A command injection vulnerability in the setup API in the Ne…
• CVE-2018-18640An issue was discovered in GitLab Community and Enterprise E…
• CVE-2018-18641An issue was discovered in GitLab Community and Enterprise E…
• CVE-2018-18642An issue was discovered in GitLab Community and Enterprise E…
• CVE-2018-18643GitLab CE & EE 11.2 and later and before 11.5.0-rc12, 11.4.6…
• CVE-2018-18644An issue was discovered in GitLab Community and Enterprise E…