CVE-2026-120189
CriticalCVSS 10.0Summary
A vulnerability was identified in D-Link DIR-505 1.10B02 in the save_upload_file/mp_upload_file function of /usr/bin/tftpd, which handles TFTP upload filenames. Manipulation of input leads to a stack-based buffer overflow. The attack can be carried out remotely, and a public exploit is available and might be used.
Risk Assessment
A remote attacker could exploit the buffer overflow to crash the device or potentially execute arbitrary code. Since the exploit is public, the risk to organizations using this model is high.
Recommendation
Update the D-Link DIR-505 firmware to a version that fixes the vulnerability, or disable the TFTP service if it is not needed. Until a patch is available, restrict access to the device's management interface and network services.
Other vulnerabilities in D-Link DIR-505
Original NVD description (English source)
A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of the file /usr/bin/tftpd of the component TFTP Upload Filename Handler. The manipulation leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS