CVE-2026-90692

CriticalCVSS 9.9

Published: 14/09/2026(UTC)Translated: 14/09/2026(UTC)NVD NIST

Summary

A vulnerability was detected in D-Link DIR-878 120B05 affecting the SetDynamicDNSIPv6Settings function of the Dynamic DNS IPv6 Settings component. Manipulation of the IPv6Address/Hostname argument results in a stack-based buffer overflow. The attack may be launched remotely.

Risk Assessment

A remote attacker can trigger a stack-based buffer overflow, potentially leading to device crash or arbitrary code execution. This may result in full router compromise and network traffic interception.

Recommendation

Update D-Link DIR-878 firmware to a version containing the fix or disable/remove the device from exposure to untrusted networks. Restrict access to the management interface and monitor for unusual device behavior.

Other vulnerabilities in D-Link DIR-878

CVE-2026-90693Critical
A flaw has been found in D-Link DIR-878 120B05 impacting the SetWan3Settings function of the WAN Settings component. Manipulation of the Primary/Secondary argument causes a stack-based buffer overflow. Remote exploitation of the attack is possible.

Original NVD description (English source)

A vulnerability was detected in D-Link DIR-878 120B05. This affects the function SetDynamicDNSIPv6Settings of the component Dynamic DNS IPv6 Settings. The manipulation of the argument IPv6Address/Hostname results in stack-based buffer overflow. The attack may be launched remotely.