CVE Intelligence

Dlink DSL-6641K vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Dlink DSL-6641K: 2 record(s), with affected versions and fixes.

CVE-2026-1744 Medium · 4.8 CWE-79 Feb 2, 2026
D-Link DSL-6641K sp_pppoe_user.js doSubmitPPP cross site scripting
A vulnerability was found in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function doSubmitPPP of the file sp_pppoe_user.js. The manipulation of the argument Username results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVE-2026-1705 Low · 2.4 CWE-79 Jan 30, 2026
D-Link DSL-6641K Web ad_virtual_server_vdsl cross site scripting
A vulnerability was detected in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function ad_virtual_server_vdsl of the component Web Interface. Performing a manipulation of the argument Name results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used.