Dashboard / CVE-2026-7027

CVE-2026-7027

LOW
INFO Priority: 0.01 BB Relevance: 39/100
Published: 2026-04-26 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity

CVSS Vector Breakdown

AV: Network
AC: Low
PR: High
UI: Passive
S: X
AT: None
VC: None
VI: Low
VA: None

Description

A vulnerability was identified in D-Link DSL-2740R EU_01.15. Impacted is an unknown function of the component Wireless Setup Section. Such manipulation of the argument Wireless Network Name leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and might be used.

Weakness Classification (2)

Affected Software (1)

VendorProductVersion
dlink dsl-2740r_firmware eu_01.15

References & Advisories (4)

https://vuldb.com/submit/797896
Third Party Advisory VDB Entry
https://vuldb.com/vuln/359607
Third Party Advisory VDB Entry
https://vuldb.com/vuln/359607/cti
Permissions Required VDB Entry

Bug Bounty Relevance

39 / 100
✓ Network accessible
✓ Low complexity

CVSS Score

1.9 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.43%
Raw Score 0.004330
Percentile 37.6%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00433
2026-10-28
0.00433

Intelligence Sources

nvd ref →

External Links