EUVD-2026-12235Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
4DescriptionCVE.org
A weakness has been identified in D-Link DIR-816 1.10CNB05. This impacts an unknown function of the file /goform/form2Wl5RepeaterStep2.cgi of the component goahead. This manipulation of the argument key1/key2/key3/key4/pskValue causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. This vulnerability only affects products that are no longer supported by the maintainer.
AnalysisAI
Critical stack-based buffer overflow vulnerability in the D-Link DIR-816 router (version 1.10CNB05) that allows remote attackers to achieve full system compromise without authentication. A public proof-of-concept exploit is available on GitHub, and the vulnerability affects end-of-life products no longer supported by D-Link, making this a high-risk issue for organizations still using these devices.
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | D-Link DIR-816 firmware version 1.10CNB05 with goahead web server enabled; remote unauthenticated access to HTTP interface on default port 80; no authentication required for /goform/form2Wl5RepeaterStep2.cgi endpoint. Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This represents a critical real-world risk with multiple alarming indicators: CVSS 9.8 (Critical) with network-accessible attack vector (AV:N), low complexity (AC:L), and no authentication required (PR:N). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker can remotely exploit this vulnerability by sending specially crafted HTTP requests to the router's web interface at /goform/form2Wl5RepeaterStep2.cgi, providing oversized values for the key1-4 or pskValue parameters. This triggers a stack buffer overflow, allowing arbitrary code execution with router privileges. … |
| Remediation | As this affects end-of-life products with no vendor support, the only effective remediation is to replace affected DIR-816 routers with supported models. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Inventory all D-Link DIR-816 devices across the organization and isolate any identified units from production networks. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Share
External POC / Exploit Code
Leaving vuln.today