CVE-2016-10699: D-Link DSL-2740E 1.00_BG_20150720 devices are prone to persistent XSS attacks in the username and password...

Security readout for executives and security teams

This issue affects reported D-Link DSL-2740E firmware 1.00_BG_20150720. An unauthenticated remote user can place script content into login fields that may later run when an administrator views router logs. The business risk is administrative-session compromise through routine log review, but the sources do not provide CVSS, patch status, or exploitation evidence. Exposure is limited to environments using D-Link DSL-2740E devices on firmware 1.00_BG_20150720, based on the provided sources. Risk increases if the router login page is reachable from untrusted networks or administrators regularly inspect logs from an authenticated browser session. Treat this as a targeted remediation item for legacy router fleets, not an internet-wide emergency based on current evidence. Prioritize any exposed management interfaces and unsupported devices because exploitation could affect administrator sessions during normal log review. Mitigation focus: Check D-Link and Trustwave guidance for fixed firmware or vendor workarounds.; Restrict router management access to trusted administrative networks only.; Disable internet-facing administration if enabled..

Prepared

Jun 12, 2026, 20:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.