Buffer Overflow Vulnerability in D-Link DIR-878 Router
CVE-2026-124562

8.7HIGH

Key Information:

Vendor

D-link
Status
Dir-878
Vendor
CVE Published:
9 November 2026

What is CVE-2026-124562?

A buffer overflow vulnerability has been discovered in the D-Link DIR-878 router, specifically within the SetWanSettings function of the HNAP Handler component. This vulnerability allows remote attackers to manipulate particular DNS configuration arguments, potentially leading to system instability or unauthorized access. The affected version, 1.20B05, is no longer supported by the vendor, increasing the risk for users who may be unaware of the security implications. Publicly available exploitation methods could be leveraged by malicious actors. Users are advised to review their device configurations and consider upgrading to a supported version or implementing additional security measures.

Affected Version(s)

DIR-878 1.20B05

References

https://vuldb.com/vuln/432894
vdb-entrytechnical-description
https://vuldb.com/vuln/432894/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-124562
third-party-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

ha ha-yang (VulDB User)
.