EUVD-2026-83792

A vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy of the file /webfaauthentication.cgi of the component Authentication Handler. Executing a manipulation of the argument id/password can lead to stack-based buffer overflow. The attack can be executed...

CVE-2026-94089

D-Link DIR-868L version 2.01b05 is affected by a stack-based buffer overflow in the strcpy function of the file /webfa_authentication.cgi , within the Authentication Handler component. Remote attackers with no privileges can trigger the overflow by manipulating the id/password argument, leading t...

CVE-2026-94089 D-Link DIR-868L Authentication webfa_authentication.cgi strcpy stack-based overflow

A vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy of the file /webfaauthentication.cgi of the component Authentication Handler. Executing a manipulation of the argument id/password can lead to stack-based buffer overflow. The attack can be executed...

CVE-2026-94050 D-Link DIR-X1860Z ubus JSON-RPC interface routerd.get_rand_key information disclosure

A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the function routerd.wificfgget/routerd.getrandkey of the component ubus JSON-RPC interface. Such manipulation leads to information disclosure. The attack must be carried out from within the local network...

CVE-2026-94050

An information disclosure vulnerability affects the ubus JSON-RPC interface of the D-Link DIR-X1860Z wireless router (firmware up to 1.0.2.220120.165402). The vulnerable functions are routerd.wificfg_get and routerd.get_rand_key , where manipulation allows an attacker on the local network to retr...

EUVD-2026-83787

A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the function routerd.wificfgget/routerd.getrandkey of the component ubus JSON-RPC interface. Such manipulation leads to information disclosure. The attack must be carried out from within the local network...

CVE-2026-94050 D-Link DIR-X1860Z ubus JSON-RPC interface routerd.get_rand_key information disclosure

A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the function routerd.wificfgget/routerd.getrandkey of the component ubus JSON-RPC interface. Such manipulation leads to information disclosure. The attack must be carried out from within the local network...

CVE-2026-94036

A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwdset results in improper access controls. The attack must originate from...

EUVD-2026-83752

A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwdset results in improper access controls. The attack must originate from...

CVE-2026-94036 D-Link DIR-X1860/DIR-X1860Z routerd ubus access control

A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwdset results in improper access controls. The attack must originate from...

CVE-2026-94036

D-Link DIR-X1860 and DIR-X1860Z routers (up to version 1.0.2.220120.165402) are affected by an improper access control flaw in the /ubus file of the routerd component. Manipulation of the passwd_set argument allows an attacker on the local network to bypass access controls, with no authentication...

CVE-2026-94036 D-Link DIR-X1860/DIR-X1860Z routerd ubus access control

A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwdset results in improper access controls. The attack must originate from...

PT-2026-95974

Name of the Vulnerable Software and Affected Versions D-Link DIR-868L version 2.01b05 Description A stack-based buffer overflow exists in the Authentication Handler component within the /webfa authentication.cgi endpoint. The issue occurs when the strcpy function processes the id and password...

PT-2026-96007

Name of the Vulnerable Software and Affected Versions D-Link DIR-X1860Z versions prior to 1.0.7.260821.161908 Description An issue exists in the ubus JSON-RPC interface where manipulation of the routerd.wificfg get and routerd.get rand key functions can lead to information disclosure. This attack...

CVE-2026-94050: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the function routerd.wificfgget/routerd.getrandkey of the component ubus JSON-RPC interface. Such manipulation leads to information disclosure. The attack must be carried out from within the local network...

CVE-2026-94089: Stack-based Buffer Overflow

A vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy of the file /webfaauthentication.cgi of the component Authentication Handler. Executing a manipulation of the argument id/password can lead to stack-based buffer overflow. The attack can be executed...

CVE-2026-94036: Improper Access Control

A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwdset results in improper access controls. The attack must originate from...

PT-2026-95901

Name of the Vulnerable Software and Affected Versions D-Link DIR-X1860 versions prior to 1.0.2.220120.165402 D-Link DIR-X1860Z versions prior to 1.0.2.220120.165402 Description Improper access controls in the routerd component allow an attacker on the local network to bypass security measures. Th...

The vulnerability of the ssdpcgi_main() function in the SSDP component of the D-Link DIR-820LW router’s microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the ssdpcgimain function in the SSDP component of the D-Link DIR-820LW router’s software lies in the lack of measures to sanitize input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

The vulnerability of the /goform/formSysCmd function in the microprogramming software for D-Link DIR-513 allows a hacker to execute arbitrary commands.

The vulnerability of the /goform/formSysCmd function in the microprogramming software for the D-Link DIR-513 router lies in the lack of data cleaning measures at the control level when processing the sysCmd parameter. Exploiting this vulnerability allows an attacker to send arbitrary commands by...