Dlink DIR-868L vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Dlink DIR-868L: 3 record(s), with affected versions and fixes.
CVE-2026-110536
Critical · 10.0
CWE-77 Oct 14, 2026
D-Link DIR-868L HNAP CGI cgibin system os command injection
A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipulation of the argument SOAPACTION can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2026-94089
Critical · 10.0
CWE-119 Sep 20, 2026
D-Link DIR-868L Authentication webfa_authentication.cgi strcpy stack-based overflow
A vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy of the file /webfa_authentication.cgi of the component Authentication Handler. Executing a manipulation of the argument id/password can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2026-3485
Critical · 9.8
CWE-78 Mar 3, 2026
D-Link DIR-868L SSDP Service sub_1BF84 os command injection
A flaw has been found in D-Link DIR-868L 110b03. This affects the function sub_1BF84 of the component SSDP Service. This manipulation of the argument ST causes os command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. This vulnerability only affects products that are no longer supported by the maintainer.