CVE-2026-110536

🗓️ 14 Oct 2026 18:15:11Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 39 Views🌐 WEB

Remote os command injection in D-Link DIR-868L HNAP CGI Handler via SOAPACTION.

Reporter	Title	Published	Views	Family All 8
BDU FSTEC	DN-Link DIR-868L CGI Handler System Call Code Execution	16 Oct 202600:00	–	bdu_fstec
Circl	CVE-2026-110536	14 Oct 202619:31	–	circl
Cvelist	CVE-2026-110536 D-Link DIR-868L HNAP CGI cgibin system os command injection	14 Oct 202618:15	–	cvelist
EUVD	EUVD-2026-101590	14 Oct 202618:15	–	euvd
NVD	CVE-2026-110536	14 Oct 202619:17	–	nvd
Positive Technologies	PT-2026-114032	14 Oct 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-110536: Improper Neutralization of Special Elements used in an OS Command	14 Oct 202600:00	–	rapid7
Vulnrichment	CVE-2026-110536 D-Link DIR-868L HNAP CGI cgibin system os command injection	14 Oct 202618:15	–	vulnrichment

Vulners

Node

dlink dir-868lMatch2.01b05

[
  {
    "vendor": "D-Link",
    "product": "DIR-868L",
    "versions": [
      {
        "version": "2.01b05",
        "status": "affected"
      }
    ],
    "cpes": [
      "cpe:2.3:h:d-link:dir-868l:*:*:*:*:*:*:*:*"
    ],
    "modules": [
      "HNAP CGI Handler"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/cve/CVE-2026-110536
vuldb	www.vuldb.com/vuln/419825
vuldb	www.vuldb.com/submit/1003693
github	www.github.com/Walnut1337/Command-Injection-DIR-868L/blob/main/ADVISORY.md
dlink	www.dlink.com/
vuldb	www.vuldb.com/vuln/419825/cti
vuldb	www.vuldb.com/submit/1003692
github	www.github.com/Walnut1337/Command-Injection-DIR-868L/tree/main/poc

Parameter	Position	Path	Description	CWE
SOAPACTION	header	/htdocs/cgibin	OS command injection vulnerability in the HNAP CGI Handler via manipulation of the SOAPACTION argument.	CWE-77, CWE-78

15 Oct 2026 15:17Current

8.5High risk

Vulners AI Score8.5

CVSS 410

CVSS 3.110

CVSS 310

CVSS 210

EPSS0.02934

SSVC