Stack-Based Buffer Overflow in D-Link DIR-878 Router
CVE-2026-124561

8.7HIGH

Key Information:

Vendor

D-link
Status
Dir-878
Vendor
CVE Published:
9 November 2026

What is CVE-2026-124561?

A stack-based buffer overflow vulnerability has been identified in the D-Link DIR-878 router, specifically in the SetVLANSettings function of the prog.cgi component within the HNAP Handler. This vulnerability allows remote attackers to manipulate the argument VID, potentially leading to unauthorized access or system compromise. It is important to note that this flaw affects versions of the product that are no longer supported, making it critical for users to assess their security posture and consider remediation actions.

Affected Version(s)

DIR-878 1.20B05

References

https://vuldb.com/vuln/432893
vdb-entrytechnical-description
https://vuldb.com/vuln/432893/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-124561
third-party-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

ha ha-yang (VulDB User)
.