CVE-2026-90881
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
A vulnerability was detected in D-Link DIR-882 up to version 20260814. It affects the main function in /HNAP1/dllog.cgi of the CGI Binary component. Manipulation leads to information disclosure. The attack can be launched remotely, and the exploit is public.
Risk Assessment
An attacker could access sensitive information such as configuration data or logs, potentially facilitating further attacks.
Recommendation
Update the router firmware to the latest version or apply available patches. Restricting access to the HNAP interface may also reduce risk.
Other vulnerabilities in D-Link DIR-882
See all- CVE-2025-60701Medium
A command injection vulnerability exists in the D-Link DIR-882 router firmware DIR882A1_FW102B02 within the prog.cgi and rc binaries. User-supplied email configuration parameters are stored in NVRAM and later concatenated into shell commands without sanitization, allowing an unauthenticated remote attacker to execute arbitrary commands.
- CVE-2025-60700Medium
A command injection vulnerability exists in the D-Link DIR-882 router firmware DIR882A1_FW102B02 within the prog.cgi and librcm.so binaries. The SetDMZSettings/IPAddress value is stored in NVRAM and later concatenated into iptables shell commands without sanitization, allowing an unauthenticated remote attacker to execute arbitrary commands.
Original NVD description (English source)
A weakness has been identified in D-Link DIR-882 up to 20260814. Impacted is the function main of the file /HNAP1/dllog.cgi of the component CGI Binary. Executing a manipulation can lead to information disclosure. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS