{"metadata": {"vulnerability": "CVE-2026-129353", "count": 18, "kinds": {"milestone": 3, "sighting": 8, "kev": 0, "other": 7}, "linked_omitted": 0}, "data": [{"timestamp": "2026-11-14T00:00:00Z", "date_only": false, "value": "2026-11-14T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2026-129353", "field": "containers.cna.timeline.0.time", "text": "Advisory disclosed"}, {"timestamp": "2026-11-14T01:00:00Z", "date_only": false, "value": "2026-11-14T01:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2026-129353", "field": "containers.cna.timeline.1.time", "text": "VulDB entry created"}, {"timestamp": "2026-11-14T06:37:47.711Z", "date_only": false, "value": "2026-11-14T06:37:47.711Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-129353", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-14T07:43:20Z", "date_only": false, "value": "2026-11-14T07:43:20.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2026-129353", "field": "containers.cna.timeline.2.time", "text": "VulDB entry last update"}, {"timestamp": "2026-11-14T08:35:56.346Z", "date_only": false, "value": "2026-11-14T08:35:56.346206Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117613878041458792", "record": "CVE-2026-129353", "field": "creation_timestamp", "uuid": "12b3e4e5-8c87-4368-bbc3-2f92e55625a0", "content": "\u26a0\ufe0f There is a new vulnerability with elevated criticality in D-Link DIR-600L (CVE-2026-129353) https://vuldb.com/vuln/437416", "url": "https://infosec.exchange/users/vuldb/statuses/117613878041458792"}, {"timestamp": "2026-11-14T16:16:51Z", "date_only": false, "value": "2026-11-14T16:16:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-129353", "record": "CVE-2026-129353", "field": "creation_timestamp", "uuid": "f095667f-f21a-4d98-b58f-ff52379c5d27", "url": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-129353"}, {"timestamp": "2026-11-14T23:15:19.934Z", "date_only": false, "value": "2026-11-14T23:15:19.934Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-129353", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-14T23:15:19.934Z", "date_only": false, "value": "2026-11-14T23:15:19.934Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-129353", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-14T23:15:19.934Z", "date_only": false, "value": "2026-11-14T23:15:19.934Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "CVE-2026-129353", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-14T23:18:44.625Z", "date_only": false, "value": "2026-11-14T23:18:44.625995Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117617349362690012", "record": "CVE-2026-129353", "field": "creation_timestamp", "uuid": "a1359916-9fae-49fb-9b20-8b0f033671f1", "content": "CVE-2026-129353 D-Link DIR-600L authentication.cgi authenticationcgi_main stack-based overflow A vulnerability was detected in D-Link DIR-600L 2.17/2.17b02. Affected by this vulnerability is the function authenticationcgi_main of the file authentication.cgi. Performing a manipulation of the argument id/password results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used.\nhttps://www.cve.org/CVERecord?id=CVE-2026-129353https://vuldb.com/vuln/437416https://vuldb.com/vuln/437416/ctihttps://vuldb.com/cve/CVE-2026-129353https://vuldb.com/submit/1043523https://github.com/ruanyi101/router-firmware-security-advisories/blob/main/router-firmware-GitHub-advisories/advisories/D-Link-DIR-600L-authentication-cgi.mdhttps://www.dlink.com/#D-Link #DIR-600L#CVE_2026_129353#bot", "url": "https://infosec.exchange/users/cve/statuses/117617349362690012"}, {"timestamp": "2026-11-14T23:50:02.952Z", "date_only": false, "value": "2026-11-14T23:50:02.952477Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3n2cou2fkec2k", "record": "CVE-2026-129353", "field": "creation_timestamp", "uuid": "06011f98-453a-4f76-978f-c3c6503d5954", "content": "CVE-2026-129353 - dir-600l\nThe DIR-600L router's login function can overflow its memory when a specially crafted username or password is sent, allowing an attacker to run code on the device from anywhere on\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dir600l #dlink #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3n2cou2fkec2k"}, {"timestamp": "2026-11-15T00:00:37.373Z", "date_only": false, "value": "2026-11-15T00:00:37.373699Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117617514019092532", "record": "cve-2026-129353", "field": "creation_timestamp", "uuid": "6d260701-d951-469c-98f3-bab528561114", "content": "D-Link DIR-600L (v2.17, 2.17b02) hit by CRITICAL (CVSS 10) stack-based buffer overflow \u2013 CVE-2026-129353. Remote, unauthenticated RCE possible. Public exploit out. Limit external exposure & check for vendor updates. https://radar.offseq.com/threat/cve-2026-129353-stack-based-buffer-overflow-in-d-link-dir-600l-696836f7a0623e09 #OffSeq #CVE2026129353 #infosec #IoT", "url": "https://infosec.exchange/users/offseq/statuses/117617514019092532"}, {"timestamp": "2026-11-15T00:00:39.212Z", "date_only": false, "value": "2026-11-15T00:00:39.212204Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3n2cpgyqjty23", "record": "cve-2026-129353", "field": "creation_timestamp", "uuid": "81914d12-e74c-46d8-b2e1-55a17c790cfa", "content": "D-Link DIR-600L (2.17 & 2.17b02): CRITICAL buffer overflow (CVE-2026-129353). Remote code execution possible via public exploit. Restrict remote access & monitor vendor for fixes. https://radar.offseq.com/threat/cve-2026-129353-stack-based-buffer-overflow-in-d-link-dir-600l-696836f7a0623e09 #OffS...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3n2cpgyqjty23"}, {"timestamp": "2026-11-15T00:16:51Z", "date_only": false, "value": "2026-11-15T00:16:51Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-96R3-GPPX-Q366", "record": "GHSA-96R3-GPPX-Q366", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-15T00:30:26Z", "date_only": false, "value": "2026-11-15T00:30:26Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-96R3-GPPX-Q366", "record": "GHSA-96R3-GPPX-Q366", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-15T00:30:26Z", "date_only": false, "value": "2026-11-15T00:30:26Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-96R3-GPPX-Q366", "record": "GHSA-96R3-GPPX-Q366", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-15T00:31:13.625Z", "date_only": false, "value": "2026-11-15T00:31:13.625804Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3n2cr5mvgduv4", "record": "CVE-2026-129353", "field": "creation_timestamp", "uuid": "e2b2848c-ca20-45c1-a0c4-b378e37fb7db", "content": "CVE Radar | CVE-2026-129353 | CVSS 10.0\n\nCritical D-Link DIR-600L Buffer Overflow\n\nCVE-2026-129353 affects D-Link DIR-600L versions 2.17 and 2.17b02.\n\nFull analysis: https://t.me/aiutocomputerhelp_lab/1439", "url": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3n2cr5mvgduv4"}, {"timestamp": "2026-11-15T02:33:46.953Z", "date_only": false, "value": "2026-11-15T02:33:46.953713Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eventmonitor.bsky.social/post/3n2fuqrllal3k", "record": "cve-2026-129353", "field": "creation_timestamp", "uuid": "a9a797f5-ca5b-4a48-ac9c-bb5f18310b33", "content": "Developing: Critical D-Link DIR-600L Vulnerability (CVE-2026-129353)\nhttps://cyber.eventmonitor.net/incident/EM-20261115-CDV4/critical-d-link-dir-600l-vulnerability-cve-2026-129353/\n#news #cybersecurity", "url": "https://bsky.app/profile/eventmonitor.bsky.social/post/3n2fuqrllal3k"}], "metrics": {"as_of": "2026-11-15T04:27:07.726Z", "anchors": {"origin": {"timestamp": "2026-11-14T23:15:19.934Z", "date_only": false, "value": "2026-11-14T23:15:19.934Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-129353", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-14T23:15:19.934Z", "date_only": false, "value": "2026-11-14T23:15:19.934Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-129353", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 18707.792361, "hours": 5.196608989166666, "days": 0.21652537454861112, "min_seconds": 18707.792361, "max_seconds": 18707.792361, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-14T23:15:19.934Z", "date_only": false, "value": "2026-11-14T23:15:19.934Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-129353", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T04:27:07.726Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}