CVE-2026-113736 D-Link CVE debrief

Who should care

Defenders responsible for D-Link DHP-W610AV devices, specifically version 1.02EUb03, should assess their exposure to remote attacks and prioritize verifying the affected devices. They should also monitor for any publicly available exploits and implement compensating controls to prevent unauthorized access. Additionally, defenders should review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance, and plan

Why it matters

The vulnerability in D-Link DHP-W610AV 1.02EUb03 allows for remote attacks due to an empty password in the configuration file. Defenders should prioritize verifying affected devices and implementing compensating controls.

• Defenders need to verify D-Link DHP-W610AV devices for exposure to remote attacks.
• The exploit has been publicly disclosed and may be used.
• Empty passwords in configuration files can lead to unauthorized access.

Technical summary

The vulnerability is found in the D-Link DHP-W610AV 1.02EUb03 version, specifically in the login_prepare_hnap function of the etc/defnodes/defaultvalue.xml file within the HNAP Login component. The manipulation of the Password argument leads to an empty password in the configuration file, allowing for remote attacks. The vulnerability allows for remote attacks due to an empty password in the configuration file. Defenders should prioritize verifying affected devices and implementing compensating controls. The exploit has been publicly disclosed and may be used.

Defensive priority

Defenders should prioritize verifying the affected D-Link DHP-W610AV devices, specifically version 1.02EUb03, and assess their exposure to remote attacks. They should also monitor for any publicly available exploits and implement compensating controls to prevent unauthorized access.

Recommended defensive actions

• Verify D-Link DHP-W610AV devices, specifically version 1.02EUb03, for exposure to remote attacks.
• Monitor for publicly available exploits and implement compensating controls to prevent unauthorized access.
• Assess the configuration file for empty passwords and update the password to a secure value.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The vulnerability was found in the D-Link DHP-W610AV 1.02EUb03 version. The exploit has been publicly disclosed and may be used. However, there is no information on known affected scope, inventory checks, or vendor remediation.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.