CVE-2026-5024Disclosure(dlink / dir-513)

LOWCVSS 7.4 · HIGH

Exploit discussion active in current signal (6 latest mentions)

Immediate actions

Prioritize remediation for dlink dir-513 systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

A vulnerability was found in D-Link DIR-513 1.10. This issue affects the function formSetEmail of the file /goform/formSetEmail. Performing a manipulation of the argument curTime results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.

dlink CVEs Back to dashboard

3.5/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/Litengzheng/vul_db/blob/main/Dir513/vul_30/README.md

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-119CWE-121CWE-787

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

dir-513
dir-513_firmware

Threat summary

Public PoC and exploit tooling are both present
8 mentions across 3 observed days
Momentum state: stable

What's happening

Exploit tool or code specified in 1 signal
PoC mentioned or linked in 1 signal
Technical details provided in 5 signals
Disclosure: 5 classified signals
General: 2 classified signals
Peaked at 6 mentions on most recent observed day (2026-03-29)
8 total mentions across 3 days

Affected systems

Vendors

dlink

Products

dir-513dir-513_firmware

2 versions affected across 2 products

Deep dive

Activity timeline8 mentions / 3d

Signal classification3 categories

Disclosure

562.5%

General

225.0%

Exploit

112.5%

Referenced assets11 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-27	1	Disclosure1
2026-03-28	1	Disclosure1
2026-03-29	6	Disclosure3Exploit1General2

Full discourse8 posts

The Hacker Wire@TheHackerWire195d
General
🟠 CVE-2026-5024 - High A vulnerability was found in D-Link DIR-513 1.10. This issue affects the function formSetEmail of the file /goform/formSetEmail. Performing a manipulation of the argument curTime results in st... https://www.thehackerwire.com/vulnerability/CVE-2026-5024/ https://t.co/WFrFcrJ0Ov
Post summary
This tweet announces a vulnerability in D‑Link DIR‑513, providing some technical details but no evidence of exploitation, patch, or PoC.
0101144
163 followersView on X
CVEarity@CVEarity194d
General
⚡ New CVE Alert: CVE-2026-5024 📊 Severity: 8.8 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-5024 #CVE-2026-5024 #CVE #High #CyberSecurity #InfoSec https://t.co/M3MeNB1jPO
Post summary
A new CVE-2026-5024 has been announced with high severity (8.8), but no further technical, exploitation, or patch details are provided.
0000037
123 followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash194d
Disclosure
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-5024 - D-Link DIR-513 formSetEmail stack-based overflow Intel Report: https://ift.tt/Q42vrPI
Post summary
The alert announces a stack-based overflow vulnerability (CVE-2026-5024) in D‑Link DIR‑513 routers, with an Intel Report link provided for further details.
0000032
280 followersView on X
CVE@CVEnew194d
Disclosure
CVE-2026-5024 A vulnerability was found in D-Link DIR-513 1.10. This issue affects the function formSetEmail of the file /goform/formSetEmail. Performing a manipulation of the argume… https://www.cve.org/CVERecord?id=CVE-2026-5024
Post summary
The text announces a vulnerability in D‑Link DIR‑513 1.10 affecting the `formSetEmail` function, provides limited technical details, and contains no information about exploitation, patches, or false claims.
0000068
56.9K followersView on X
dbugs@ptdbugs195d
Exploit
D-Link DIR-513 formSetEmail stack-based overflow CVE: CVE-2026-5024 Vendor: D-link Product: DIR-513 CVSS: 8.7 Credits: LtzHust2 (VulDB User) Description: A vulnerability was found in D-Link DIR-513 1.10. This issue affects the function formSetEmail of the file /goform/formSetEmail. Performing a manipulation of the argument curTime results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer. References: • https://vuldb.com/vuln/353908 • https://vuldb.com/vuln/353908/cti • https://vuldb.com/submit/778414 • https://github.com/Litengzheng/vul_db/blob/main/Dir513/vul_30/README.md • https://www.dlink.com/ #dbugs_vuln
Post summary
CVE‑2026‑5024 is a stack-based buffer overflow in D‑Link DIR‑513’s formSetEmail function with CVSS 8.7. An exploit is publicly available via GitHub; no patch or active exploitation is reported.
00000140
781 followersView on X
CVEFind.com@CveFindCom195d
Disclosure
[CVE-2026-5024: HIGH] Critical remote stack-based buffer overflow vulnerability discovered in D-Link DIR-513 1.10. Exploit publicly available for unsupported products. Stay vigilant against cyber threats.#cve,CVE-2026-5024,#cybersecurity https://cvefind.com/CVE-2026-5024
Post summary
The post announces CVE-2026-5024, a critical remote stack-based buffer overflow in D-Link DIR-513 1.10, noting that the exploit is publicly available but offering no further technical or mitigation details.
0000035
617 followersView on X
VulDB 🛡@vuldb195d
Disclosure
A severe vulnerability was disclosed for D-Link DIR-513 (CVE-2026-5024) https://vuldb.com/vuln/353908
Post summary
A severe vulnerability (CVE‑2026‑5024) has been disclosed for the D‑Link DIR‑513 and is referenced on vuldb.
0000066
2.1K followersView on X
VulDB 🛡@vuldb196d
Disclosure
A severe vulnerability was disclosed for D-Link DIR-513 (CVE-2026-5024) https://vuldb.com/?id.353908
Post summary
The text announces that a severe vulnerability (CVE‑2026‑5024) has been disclosed for the D‑Link DIR‑513.
0000063
2.1K followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	dlink	dir-513	-	-	-
OS	dlink	dir-513_firmware	1.10	-	-

Explore more

Back to dashboard dlink CVEs dir-513 vulnerabilities

What researchers are saying

CVE-2026-5024

dbugs[verified]@ptdbugsExploit

CVE‑2026‑5024 is a stack-based buffer overflow in D‑Link DIR‑513’s formSetEmail function with CVSS 8.7. An exploit is publicly available via GitHub; no patch or active exploitation is reported.

The Hacker Wire@TheHackerWireGeneral

This tweet announces a vulnerability in D‑Link DIR‑513, providing some technical details but no evidence of exploitation, patch, or PoC.

CVEarity@CVEarityGeneral

A new CVE-2026-5024 has been announced with high severity (8.8), but no further technical, exploitation, or patch details are provided.

CyberDudeBivash® | Global Cybersecurity Company@cyberbivashDisclosure

The alert announces a stack-based overflow vulnerability (CVE-2026-5024) in D‑Link DIR‑513 routers, with an Intel Report link provided for further details.

CVE@CVEnewDisclosure

The text announces a vulnerability in D‑Link DIR‑513 1.10 affecting the `formSetEmail` function, provides limited technical details, and contains no information about exploitation, patches, or false claims.

CVEFind.com@CveFindComDisclosure

The post announces CVE-2026-5024, a critical remote stack-based buffer overflow in D-Link DIR-513 1.10, noting that the exploit is publicly available but offering no further technical or mitigation details.

VulDB 🛡@vuldbDisclosure

A severe vulnerability (CVE‑2026‑5024) has been disclosed for the D‑Link DIR‑513 and is referenced on vuldb.

VulDB 🛡@vuldbDisclosure

The text announces that a severe vulnerability (CVE‑2026‑5024) has been disclosed for the D‑Link DIR‑513.