CVE-2026-110536
10 CRITICALpublic exploit availablePublished 2026-10-14 · Updated 2026-10-15
AI risk analysis
- Summary
- A remote command injection vulnerability exists in D-Link DIR-868L routers due to improper input validation in the SOAPACTION parameter of the HNAP CGI Handler. This allows attackers to execute arbitrary OS commands with high impact.
- Exploitability
- The vulnerability is highly exploitable with no authentication required, allowing remote attackers to inject OS commands through a manipulated SOAPACTION argument.
- Blast radius
- If exploited, this vulnerability could allow attackers to gain full control of affected routers, potentially enabling them to redirect traffic, steal credentials, or establish persistent access points within the network.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to firmware version 2.01b06 or later to remediate this command injection vulnerability.
rcerouterwebcommand-injection
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipulation of the argument SOAPACTION can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-77, CWE-78
Public exploit & PoC references
All references
- https://github.com/Walnut1337/Command-Injection-DIR-868L/blob/main/ADVISORY.md
- https://github.com/Walnut1337/Command-Injection-DIR-868L/tree/main/poc
- https://vuldb.com/cve/CVE-2026-110536
- https://vuldb.com/submit/1003692
- https://vuldb.com/submit/1003693
- https://vuldb.com/vuln/419825
- https://vuldb.com/vuln/419825/cti
- https://www.dlink.com/
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- CRITICALCVE-2026-109108PoC
- CRITICALCVE-2026-108918PoC
- CRITICALCVE-2026-108540PoC
- CRITICALCVE-2026-108804PoC
- CRITICALCVE-2026-108894PoC
- CRITICALCVE-2026-108895PoC
- CRITICALCVE-2026-110957PoC
- CRITICALCVE-2020-37282PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.