CVE-2026-110536
CriticalCVSS 10.0Summary
A vulnerability was found in D-Link DIR-868L version 2.01b05. It affects the system function in the /htdocs/cgibin file of the HNAP CGI Handler component. Manipulation of the SOAPACTION argument can lead to OS command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
Risk Assessment
The vulnerability allows a remote attacker to execute arbitrary OS commands on the device, potentially leading to full router compromise. This poses a critical risk to network security.
Recommendation
Update the device firmware to the latest version as soon as possible or apply vendor-recommended mitigations. If updating is not possible, consider disabling the HNAP interface or restricting access to it.
Other vulnerabilities in D-Link DIR-868L
See all- CVE-2026-94089Critical
A vulnerability was found in D-Link DIR-868L 2.01b05 in the strcpy function of the file /webfa_authentication.cgi in the Authentication Handler component. Manipulating the id/password arguments leads to a stack-based buffer overflow. The attack can be executed remotely, and the exploit has been publicly disclosed.
- CVE-2023-39668Critical
The D-Link DIR-868L with firmware version fw_revA_1-12_eu_multi_20170316 was found to contain a buffer overflow in the inet_ntoa() function via the param_2 parameter.
- CVE-2023-39667Critical
D-Link DIR-868L with firmware version fw_revA_1-12_eu_multi_20170316 was found to contain a buffer overflow vulnerability in the FUN_0000acb4 function via the param_2 parameter.
- CVE-2023-39665Critical
D-Link DIR-868L with firmware version fw_revA_1-12_eu_multi_20170316 was found to contain a buffer overflow via the acStack_50 parameter.
Original NVD description (English source)
A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipulation of the argument SOAPACTION can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS