CVE-2026-120189

A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function saveuploadfile/mpuploadfile of the file /usr/bin/tftpd of the component TFTP Upload Filename Handler. The manipulation leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The...

EUVD-2026-114738

A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function saveuploadfile/mpuploadfile of the file /usr/bin/tftpd of the component TFTP Upload Filename Handler. The manipulation leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The...

CVE-2026-120189: D-Link DIR-505: A vulnerability was identified in D-Link DIR-505 1.10B02

A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function saveuploadfile/mpuploadfile of the file /usr/bin/tftpd of the component TFTP Upload Filename Handler. The manipulation leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The...

CVE-2026-58166: Improper Limitation of a Pathname to a Restricted Directory

OpenBMB ChatDev through 2.2.0, fixed in commit 4fd4da6, contains a path traversal vulnerability that allows unauthenticated remote attackers to write or delete arbitrary files by supplying a malicious multipart filename in the file upload endpoint. Attackers can send a crafted filename containing...