{"metadata": {"vulnerability": "CVE-2026-129354", "count": 13, "kinds": {"milestone": 2, "sighting": 6, "kev": 0, "other": 5}, "linked_omitted": 0}, "data": [{"timestamp": "2026-11-14T00:00:00Z", "date_only": false, "value": "2026-11-14T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2026-129354", "field": "containers.cna.timeline.0.time", "text": "Advisory disclosed"}, {"timestamp": "2026-11-14T01:00:00Z", "date_only": false, "value": "2026-11-14T01:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2026-129354", "field": "containers.cna.timeline.1.time", "text": "VulDB entry created"}, {"timestamp": "2026-11-14T06:38:12.433Z", "date_only": false, "value": "2026-11-14T06:38:12.433Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-129354", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-14T06:47:32.781Z", "date_only": false, "value": "2026-11-14T06:47:32.781252Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117613451827322494", "record": "CVE-2026-129354", "field": "creation_timestamp", "uuid": "23cd43c9-7057-4df9-b00f-12c2f65c3b82", "content": "\u26a0\ufe0f A new vulnerability with increased severity was disclosed for D-Link DIR-600L (CVE-2026-129354) https://vuldb.com/vuln/437417", "url": "https://infosec.exchange/users/vuldb/statuses/117613451827322494"}, {"timestamp": "2026-11-14T07:43:26Z", "date_only": false, "value": "2026-11-14T07:43:26.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2026-129354", "field": "containers.cna.timeline.2.time", "text": "VulDB entry last update"}, {"timestamp": "2026-11-15T00:45:26.093Z", "date_only": false, "value": "2026-11-15T00:45:26.093Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-129354", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-15T00:45:26.093Z", "date_only": false, "value": "2026-11-15T00:45:26.093Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-129354", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-15T00:45:26.093Z", "date_only": false, "value": "2026-11-15T00:45:26.093Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "CVE-2026-129354", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-15T00:50:47.175Z", "date_only": false, "value": "2026-11-15T00:50:47.175207Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117617711291181183", "record": "CVE-2026-129354", "field": "creation_timestamp", "uuid": "1e098909-00b9-46c9-b0f0-b8384b8ad0bf", "content": "CVE-2026-129354 D-Link DIR-600L HNAP cgibin hnap_main stack-based overflow A flaw has been found in D-Link DIR-600L 2.17b02. Affected by this issue is the function hnap_main of the file htdocs/cgibin of the component HNAP Handler. Executing a manipulation can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been published and may be used.\nhttps://www.cve.org/CVERecord?id=CVE-2026-129354https://vuldb.com/vuln/437417https://vuldb.com/vuln/437417/ctihttps://vuldb.com/cve/CVE-2026-129354https://vuldb.com/submit/1043526https://github.com/ruanyi101/router-firmware-security-advisories/blob/main/router-firmware-GitHub-advisories/advisories/D-Link-DIR-600L-HNAP-SOAPAction.mdhttps://www.dlink.com/#D-Link #DIR-600L#CVE_2026_129354#bot", "url": "https://infosec.exchange/users/cve/statuses/117617711291181183"}, {"timestamp": "2026-11-15T01:30:37.138Z", "date_only": false, "value": "2026-11-15T01:30:37.138436Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117617867858915943", "record": "cve-2026-129354", "field": "creation_timestamp", "uuid": "9d3e4f47-22e0-4925-9492-77d12e14d063", "content": "D-Link DIR-600L (v2.17b02) hit by CRITICAL stack-based buffer overflow (CVE-2026-129354) \ud83d\uded1 Exploit code is public \u2014 RCE or DoS possible. No patch yet; restrict access & monitor HNAP traffic. https://radar.offseq.com/threat/cve-2026-129354-stack-based-buffer-overflow-in-d-link-dir-600l-c412d5c008ac0f05 #OffSeq #CVE2026129354 #infosec #routers", "url": "https://infosec.exchange/users/offseq/statuses/117617867858915943"}, {"timestamp": "2026-11-15T01:30:38.919Z", "date_only": false, "value": "2026-11-15T01:30:38.919352Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3n2cuhvs6my2v", "record": "cve-2026-129354", "field": "creation_timestamp", "uuid": "8afb2a92-45ce-4d6e-83f3-96516b5fe7b7", "content": "D-Link DIR-600L v2.17b02 faces a CRITICAL stack buffer overflow (CVE-2026-129354). Public exploit code \u2014 remote code execution possible. Restrict admin access & watch HNAP traffic until patch info. https://radar.offseq.com/threat/cve-2026-129354-stack-based-buffer-overflow-in-d-link-dir-600l-c412...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3n2cuhvs6my2v"}, {"timestamp": "2026-11-15T01:30:45.180Z", "date_only": false, "value": "2026-11-15T01:30:45.180601Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3n2cui2svwchx", "record": "CVE-2026-129354", "field": "creation_timestamp", "uuid": "3752999d-6ba4-447c-b306-d2768a54c73e", "content": "CVE Radar | CVE-2026-129354 | CVSS 10.0\n\nCritical D-Link DIR-600L HNAP Overflow\n\nCVE-2026-129354 affects D-Link DIR-600L version 2.17b02.\n\nFull analysis: https://t.me/aiutocomputerhelp_lab/1440", "url": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3n2cui2svwchx"}, {"timestamp": "2026-11-15T02:10:04.894Z", "date_only": false, "value": "2026-11-15T02:10:04.894180Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3n2cwoflkfq2a", "record": "CVE-2026-129354", "field": "creation_timestamp", "uuid": "3ae65ddc-0d77-4a26-ac48-ded551b215fa", "content": "CVE-2026-129354\nThe D-Link DIR-600L router version 2.17b02 has a mistake in its web\u2011based management code that lets an attacker send specially crafted data and overflow the memory buffer. This can be done over the network\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3n2cwoflkfq2a"}], "metrics": {"as_of": "2026-11-15T04:09:30.659Z", "anchors": {"origin": {"timestamp": "2026-11-15T00:45:26.093Z", "date_only": false, "value": "2026-11-15T00:45:26.093Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-129354", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-15T00:45:26.093Z", "date_only": false, "value": "2026-11-15T00:45:26.093Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-129354", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 12244.566279, "hours": 3.4012684108333335, "days": 0.14171951711805555, "min_seconds": 12244.566279, "max_seconds": 12244.566279, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-15T00:45:26.093Z", "date_only": false, "value": "2026-11-15T00:45:26.093Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-129354", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T04:09:30.659Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}