CVE-2026-1744 | D-Link DSL-6641K N8.TR069.20131126 sp_pppoe_user.js doSubmitPPP Username cross site scripting

A vulnerability, which was classified as problematic, was found in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function doSubmitPPP of the file sp_pppoe_user.js. The manipulation of the argument Username results in cross site scripting. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is cataloged as CVE-2026-1744. The attack may be launched remotely. Furthermore, there is an exploit available.