CVE-2026-4184

🗓️ 15 Mar 2026 17:32:09Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 12 Views🌐 WEB

Remote stack overflow in goahead form2Wl5BasicSetup.cgi on D-Link DIR-816 via pskValue; product unsupported.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2026-4184	15 Mar 202617:32	–	attackerkb
BDU FSTEC	The vulnerability of the /goform/form2Wl5BasicSetup.cgi file of the goahead component, a microprogramming system for D-Link DIR-816 routers, allows a hacker to execute arbitrary code.	1 Apr 202600:00	–	bdu_fstec
Circl	CVE-2026-4184	14 Mar 202622:13	–	circl
CNNVD	D-Link DIR-816 安全漏洞	16 Mar 202600:00	–	cnnvd
Cvelist	CVE-2026-4184 D-Link DIR-816 goahead form2Wl5BasicSetup.cgi stack-based overflow	15 Mar 202617:32	–	cvelist
EUVD	EUVD-2026-12239	16 Mar 202615:30	–	euvd
NVD	CVE-2026-4184	16 Mar 202614:19	–	nvd
Positive Technologies	PT-2026-25534	14 Mar 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-4184	26 Mar 202614:58	–	redhatcve
Vulnrichment	CVE-2026-4184 D-Link DIR-816 goahead form2Wl5BasicSetup.cgi stack-based overflow	15 Mar 202617:32	–	vulnrichment

NVD

Node

dlink dir-816_firmwareMatch1.10cnb05

AND

dlink dir-816Match-

[
  {
    "vendor": "D-Link",
    "product": "DIR-816",
    "versions": [
      {
        "version": "1.10CNB05",
        "status": "affected"
      }
    ],
    "modules": [
      "goahead"
    ]
  }
]

Source	Link
github	www.github.com/wudipjq/my_vuln/blob/main/D-Link7/vuln_88/88.md
vuldb	www.vuldb.com/
dlink	www.dlink.com/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
pskValue	request body	/goform/form2Wl5BasicSetup.cgi	Stack-based buffer overflow via manipulation of pskValue in /goform/form2Wl5BasicSetup.cgi (D-Link DIR-816 1.10CNB05); remote exploit available.	CWE-787, CWE-121, CWE-119

17 Jun 2026 10:56Current

8High risk

Vulners AI Score8

CVSS 49.3

CVSS 3.19.8

CVSS 210

CVSS 39.8

EPSS0.01184

SSVC

D-Link DIR-816 goahead component form2Wl5BasicSetup.cgi pskValue parameter remote exploit buffer overflow unsupported firmware