PT-2026-96007

Name of the Vulnerable Software and Affected Versions D-Link DIR-X1860Z versions prior to 1.0.7.260821.161908 Description An issue exists in the ubus JSON-RPC interface where manipulation of the routerd.wificfg get and routerd.get rand key functions can lead to information disclosure. This attack...

PT-2026-95901

Name of the Vulnerable Software and Affected Versions D-Link DIR-X1860 versions prior to 1.0.2.220120.165402 D-Link DIR-X1860Z versions prior to 1.0.2.220120.165402 Description Improper access controls in the routerd component allow an attacker on the local network to bypass security measures. Th...

The vulnerability of the ssdpcgi_main() function in the SSDP component of the D-Link DIR-820LW router’s microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the ssdpcgimain function in the SSDP component of the D-Link DIR-820LW router’s software lies in the lack of measures to sanitize input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

The vulnerability of the handler_update_system_time() function (libdeuteron_modules.so) in the NTP Service component of D-Link DIR-825 and DIR-825R router microprogramming software, allowing a attacker to execute arbitrary commands.

The vulnerability of the handlerupdatesystemtime function libdeuteronmodules.so of the NTP Service component of D-Link DIR-825 and DIR-825R routers is related to the lack of measures taken to protect data at the management level. Exploiting this vulnerability could allow a remote attacker to...

The vulnerability of the goform/formSetWizardSelectMode() function in the D-Link DIR-513 router software allows a hacker to induce a service failure.

The vulnerability of the goform/formSetWizardSelectMode function in the D-Link DIR-513 router microprogramming system is related to the writing beyond buffer boundaries when processing the curTime parameter. Exploiting this vulnerability could allow an attacker to cause a service failure by sendi...

The vulnerability of D-link DIR-823G router microprogramming software, related to errors in privilege management, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of D-link DIR-823G router microprogramming software is related to errors in privilege management. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the /goform/formSysCmd function in the microprogramming software for D-Link DIR-513 allows a hacker to execute arbitrary commands.

The vulnerability of the /goform/formSysCmd function in the microprogramming software for the D-Link DIR-513 router lies in the lack of data cleaning measures at the control level when processing the sysCmd parameter. Exploiting this vulnerability allows an attacker to send arbitrary commands by...

The vulnerability of the formAdvFirewall function in D-Link DIR-605L router software allows a hacker to execute arbitrary commands.

The vulnerability of the formAdvFirewall function in D-Link DIR-605L router microprogramming systems is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

The vulnerability of the `formAdvanceSetup` function in the `/goform/formAdvanceSetup` file, belonging to the POST Request Handler of the D-Link DIR-513 router’s microprogramming system, allows a intruder to cause a service failure.

The vulnerability of the formAdvanceSetup function in the /goform/formAdvanceSetup file of the POST Request Handler component of the D-Link DIR-513 router microprogramming system is related to the copying of buffer data without checking the size of the input data during the processing of the...

The vulnerability of the hedwigcgi_main() function in D-Link DIR-645 router’s software allows a hacker to execute arbitrary code.

The vulnerability of the hedwigcgimain function in D-Link DIR-645 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

CVE-2026-90881

A weakness has been identified in D-Link DIR-882 up to 20260814. Impacted is the function main of the file /HNAP1/dllog.cgi of the component CGI Binary. Executing a manipulation can lead to information disclosure. The attack may be launched remotely. The exploit has been made available to the...

EUVD-2026-78271

A weakness has been identified in D-Link DIR-882 up to 20260814. Impacted is the function main of the file /HNAP1/dllog.cgi of the component CGI Binary. Executing a manipulation can lead to information disclosure. The attack may be launched remotely. The exploit has been made available to the...

CVE-2026-90881 D-Link DIR-882 CGI Binary dllog.cgi main information disclosure

A weakness has been identified in D-Link DIR-882 up to 20260814. Impacted is the function main of the file /HNAP1/dllog.cgi of the component CGI Binary. Executing a manipulation can lead to information disclosure. The attack may be launched remotely. The exploit has been made available to the...

CVE-2026-90881

A weakness in D-Link DIR-882 (firmware up to 20260814) affects the main function of the file /HNAP1/dllog.cgi within the CGI Binary component. A remote attacker with no prior authentication can manipulate this function to achieve information disclosure . A public proof-of-concept exploit is avail...

CVE-2026-90881 D-Link DIR-882 CGI Binary dllog.cgi main information disclosure

A weakness has been identified in D-Link DIR-882 up to 20260814. Impacted is the function main of the file /HNAP1/dllog.cgi of the component CGI Binary. Executing a manipulation can lead to information disclosure. The attack may be launched remotely. The exploit has been made available to the...

The vulnerability of the strcpy function in the HNAP1 component of D-Link’s DIR-823G router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the strcpy function in the HNAP1 component of D-Link DIR-823G microprogrammed router software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

PT-2026-92059

crawl4ai before 0.9.3 contains an arbitrary file write vulnerability in PDFContentScrapingStrategy where the filter untrusted fields function fails to validate untrusted configuration fields. Attackers can submit crafted config bodies with malicious image save dir paths to write attacker-controll...

The vulnerability of the SetWan3Settings function in the WAN Settings component of D-Link DIR-878 wireless routers allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SetWan3Settings function in the WAN Settings component of the D-Link DIR-878 wireless router’s microprogramming system is related to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the SetDynamicDNSIPv6Settings function in the Dynamic DNS IPv6 Settings component of the D-Link DIR-878 wireless router allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SetDynamicDNSIPv6Settings function in the Dynamic DNS IPv6 Settings component of the D-Link DIR-878 wireless router lies in the fact that the operation’s output is stored outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise...

CVE-2026-90881: Exposure of Sensitive Information to an Unauthorized Actor

A weakness has been identified in D-Link DIR-882 up to 20260814. Impacted is the function main of the file /HNAP1/dllog.cgi of the component CGI Binary. Executing a manipulation can lead to information disclosure. The attack may be launched remotely. The exploit has been made available to the...