EUVD-2026-77316
GHSA-vmqq-69gc-qcmg
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable web handler requiring an authenticated session (PR:L) and no user interaction; stack overflow on router firmware yields code execution, so C/I/A:H with unchanged scope.
Primary rating from Vendor (vuldb).
CVSS VectorVendor: vuldb
Lifecycle Timeline
2DescriptionCVE.org
A vulnerability was detected in D-Link DIR-878 120B05. This affects the function SetDynamicDNSIPv6Settings of the component Dynamic DNS IPv6 Settings. The manipulation of the argument IPv6Address/Hostname results in stack-based buffer overflow. The attack may be launched remotely.
Articles & Coverage 1
AnalysisAI
Stack-based buffer overflow in the D-Link DIR-878 router (firmware 120B05) lets an authenticated attacker corrupt the stack by supplying an oversized IPv6Address/Hostname argument to the SetDynamicDNSIPv6Settings handler of the Dynamic DNS IPv6 Settings component. Because the flaw is reachable remotely over the web management interface and the CVSS 4.0 vector indicates full compromise of confidentiality, integrity and availability, successful exploitation can plausibly yield arbitrary code execution on the device. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network access to the DIR-878's HTTP management interface and an authenticated session (CVSS PR:L) - the SetDynamicDNSIPv6Settings function is an administrative Dynamic DNS IPv6 configuration handler, so the attacker must be able to submit configuration requests. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor-style CVSS 4.0 score of 9.4 reflects a network-reachable flaw (AV:N/AC:L) requiring only low privileges (PR:L) and no user interaction, with high impact to the vulnerable system and, as scored, to subsequent systems. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch version is identified in the available data; consult D-Link's support/security pages (https://www.dlink.com/) for a firmware update superseding 120B05, and monitor the VulDB record (https://vuldb.com/cve/CVE-2026-90692) and the GitHub advisory for fix status, noting the DIR-878 may be near or past end-of-support. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all D-Link DIR-878 devices running firmware 120B05 in your network, change administrative credentials to strong unique passwords, and immediately disable remote web management access (WAN-facing HTTP/HTTPS and UPnP). …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClien
The D-Link DIR-645 Wired/Wireless Router Rev. Rated high severity (CVSS 8.8), this vulnerability is no authentication re
The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr
D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set
Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. Rated critical severity (
Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Rated high severity (CVSS 8.0)
Unrestricted file upload vulnerability in D-Link DCS-931L with firmware 1.04 and earlier allows remote authenticated use
D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/__show_info.php?RE
Multiple cross-site scripting (XSS) vulnerabilities in D-Link DIR-645 Router (Rev. Rated medium severity (CVSS 4.3), thi
Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remot
A vulnerability in the D-Link DIR-859 router with firmware version A3 1.05 and earlier permits unauthorized individuals
The web interface of multiple D-Link routers, including DIR-600 rev B (≤2.14b01) and DIR-300 rev B (≤2.13), contains an
Same weakness CWE-119 – Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today