CVE-2026-90693

CriticalCVSS 9.9

Published: 14/09/2026(UTC)Translated: 14/09/2026(UTC)NVD NIST

Summary

A flaw has been found in D-Link DIR-878 120B05 impacting the SetWan3Settings function of the WAN Settings component. Manipulation of the Primary/Secondary argument causes a stack-based buffer overflow. Remote exploitation of the attack is possible.

Risk Assessment

A remote attacker can trigger a stack-based buffer overflow, potentially leading to device crash or arbitrary code execution. This may result in full router compromise and network traffic interception.

Recommendation

Update D-Link DIR-878 firmware to a version containing the fix or disable/remove the device from exposure to untrusted networks. Restrict access to the management interface and monitor for unusual device behavior.

Other vulnerabilities in D-Link DIR-878

CVE-2026-90692Critical
A vulnerability was detected in D-Link DIR-878 120B05 affecting the SetDynamicDNSIPv6Settings function of the Dynamic DNS IPv6 Settings component. Manipulation of the IPv6Address/Hostname argument results in a stack-based buffer overflow. The attack may be launched remotely.

Original NVD description (English source)

A flaw has been found in D-Link DIR-878 120B05. This impacts the function SetWan3Settings of the component WAN Settings. This manipulation of the argument Primary/Secondary causes stack-based buffer overflow. Remote exploitation of the attack is possible.