CVE-2026-124560

Summary

A heap-based buffer overflow in D-Link DIR-878 firmware v1.20B05's HNAP handler (GetCAPTCHAsetting function) allows remote attackers to corrupt memory by supplying a malformed uid parameter, enabling full system compromise including remote code execution.

Exploitability

Exploitation is trivial as a public exploit exists and requires no authentication or user interaction due to the network-accessible HNAP endpoint.

Blast radius

Successful exploitation grants full control of the device, potentially enabling pivot into internal networks, credential theft, or use as a persistent backdoor.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

No fixed version is published by D-Link; the device is end-of-life and unsupported, so immediate decommissioning and replacement with a supported model is the only effective remediation.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.