VulnerabilityAnalyzed

CVE-2026-7027

A vulnerability was identified in D-Link DSL-2740R EU_01.15.

LOW 1.9EPSS 0.43%

Does this matter?

Lower severity and a low EPSS score (0.43%). Track it; it rarely justifies an emergency change on its own.

Description

A vulnerability was identified in D-Link DSL-2740R EU_01.15. Impacted is an unknown function of the component Wireless Setup Section. Such manipulation of the argument Wireless Network Name leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and might be used.

CVSS 4.0: 1.9 LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.43% probability · 37th percentile
CISA KEV: Not listed
Weakness: CWE-79, CWE-94
Affected: dlink/dsl-2740r firmware
Source: cna@vuldb.com

References

https://vuldb.com/submit/797896Third Party Advisory, VDB Entry
https://vuldb.com/vuln/359607Third Party Advisory, VDB Entry
https://vuldb.com/vuln/359607/ctiPermissions Required, VDB Entry
https://www.dlink.com/Product

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.