CVE-2021-26709

D-Link DSL-320B-D1 devices through EU_1.25 are prone to multiple Stack-Based Buffer Overflows that allow unauthenticated remote attackers to take over a device via the login.xgi user and pass parameters. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

• CWE-787

• http://packetstormsecurity.com/files/162133/D-Link-DSL-320B-D1-Pre-Authentication-Buffer-Overflow.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2021/Apr/15Mailing List, Third Party Advisory
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10216Vendor Advisory
• https://www.dlink.com/en/security-bulletinVendor Advisory
• http://packetstormsecurity.com/files/162133/D-Link-DSL-320B-D1-Pre-Authentication-Buffer-Overflow.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2021/Apr/15Mailing List, Third Party Advisory
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10216Vendor Advisory
• https://www.dlink.com/en/security-bulletinVendor Advisory

Published

Apr 7, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-26703EPrints 3.4.2 allows remote attackers to read arbitrary file…9.8
• CVE-2021-26704EPrints 3.4.2 allows remote attackers to execute arbitrary c…8.8
• CVE-2021-26705An issue was discovered in SquareBox CatDV Server through 9.…9.1
• CVE-2021-26706An issue was discovered in lib_mem.c in Micrium uC/OS uC/LIB…9.8
• CVE-2021-26707The merge-deep library before 3.0.3 for Node.js can be trick…9.8
• CVE-2021-26708A local privilege escalation was discovered in the Linux ker…7
• CVE-2021-26710A cross-site scripting (XSS) issue in the login panel in Red…6.1
• CVE-2021-26711A frame-injection issue in the online help in Redwood Report…5.3
• CVE-2021-26712Incorrect access controls in res_srtp.c in Sangoma Asterisk …7.5
• CVE-2021-26713A stack-based buffer overflow in res_rtp_asterisk.c in Sango…6.5
• CVE-2021-26714The Enterprise License Manager portal in Mitel MiContact Cen…9.8
• CVE-2021-26715The OpenID Connect server implementation for MITREid Connect…9.1