Critical severity9.8NVD Advisory· Published Oct 21, 2026

CVE-2026-113736

Description

A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function login_prepare_hnap of the file etc/defnodes/defaultvalue.xml of the component HNAP Login. The manipulation of the argument Password leads to empty password in configuration file. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dlink/DHP-W610AVllm-create
Range: 1.02EUb03

Patches

Vulnerability mechanics

References

github.com/XueDugu/dlink-dhp-w610av-empty-admin-password-evidence/blob/main/poc/poc_dhp610av_login.pynvd
vuldb.com/cve/CVE-2026-113736nvd
vuldb.com/submit/1015789nvd
vuldb.com/vuln/422892nvd
vuldb.com/vuln/422892/ctinvd
www.dlink.comnvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000