Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function login_prepare_hnap of the file etc/defnodes/defaultvalue.xml of the component HNAP Login. The manipulation of the argument Password leads to empty password in configuration file. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
🔓 D-Link DHP-W610AV: CVSS 9.8 with a public PoC. CVE-2026-113736 targets the HNAP login via an empty password in login_prepare_hnap — no auth, no interaction, full compromise. Retire or isolate this device now. #cybersecurity #cve #dlink #vulnerabilities https://secalerts.co/vulnerability/CVE-2026-113736?utm_campaign=x https://t.co/8end2tCdHf