cve.nowby Sazabi
← All vulnerabilities
CVE-2026-110536

D-Link DIR-868L HNAP CGI cgibin system os command injection

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: poc
  • Automatable: yes
  • Technical impact: total
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipulation of the argument SOAPACTION can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

Affected versions

  • D-Link DIR-868L

    2.01b05

References 8

VulDB

GitHub · Walnut1337/Command-Injection-DIR-868L

dlink.com