CVE-2019-17146

The CVE covers a vulnerability in D-Link DCS-960L (v1.07.102) where the HNAP service on port 80 improperly validates the length of user-supplied data in SOAPAction headers, leading to a stack-based overflow and remote code execution as the admin user. Multiple sources (ZDI advisory ZDI-19-1031, N...

CVE-2026-12174

CVE-2026-12174 affects D-Link DCS-935L firmware 1.10.01. The vulnerability is in the HTTP Handler’s function snprintf used by /web/cgi-bin/greece/rhea, allowing format-string manipulation. This can enable a remote attacker to exploit the flaw; public exploits have been disclosed. The available do...

CVE-2025-10779

CVE-2025-10779 concerns the D-Link DCS-935L router (firmware up to 1.13.01). The vulnerability occurs in the HNAP1/ file, in the function sub_402280, where manipulating the HNAP_AUTH/SOAPAction argument enables a stack-based buffer overflow. The issue is exploitable remotely and, per sources, the...

CVE-2026-8260

Technical details about CVE-2026-8260 are not publicly available in the provided documents. Monitor for updates from official advisories. The initial description states the vulnerability exists in D-Link DCS-935L HNAP service SetDeviceSettings buffer overflow.

CVE-2026-13545

CVE-2026-13545 affects D-Link DCS-935L 1.10.01. The vulnerability is in the function sub_400E40 of setconf.cgi (POST Parameter Handler); manipulating the UID argument enables an OS command injection. The attack can be launched remotely, and the exploit has been disclosed publicly. CVSS metrics in...