CVE-2026-124562

7.5 HIGHpublic exploit available

Published 2026-11-09 · Updated 2026-11-09

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

A vulnerability was identified in D-Link DIR-878 1.20B05. Affected is the function SetWanSettings of the component HNAP Handler. The manipulation of the argument ConfigDNS/Primary/ConfigDNS/Secondary leads to buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-119, CWE-120

Public exploit & PoC references

https://github.com/Zimo-666/DIR-878-cves/tree/main/02-setwansettings-dns-stack-overflow

All references

https://github.com/Zimo-666/DIR-878-cves/tree/main/02-setwansettings-dns-stack-overflow
https://vuldb.com/cve/CVE-2026-124562
https://vuldb.com/submit/1035618
https://vuldb.com/vuln/432894
https://vuldb.com/vuln/432894/cti
https://www.dlink.com/

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2016-15060PoC
MEDIUMCVE-2026-103227PoC
MEDIUMCVE-2026-108822PoC
CRITICALCVE-2026-108914PoC
CRITICALCVE-2026-108915PoC
MEDIUMCVE-2026-108954PoC
MEDIUMCVE-2026-110695PoC
MEDIUMCVE-2026-112107PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.