Buffer Overflow Vulnerability in D-Link DIR-878 Router
CVE-2026-124563

8.7HIGH

Key Information:

Vendor

D-link

Status
Vendor
CVE Published:
9 November 2026

What is CVE-2026-124563?

A buffer overflow vulnerability exists in the D-Link DIR-878 router's SetWanSettings function within the HNAP Handler. This flaw allows an attacker to manipulate input arguments, specifically Primary/Secondary, leading to potential remote exploitation. It's important to note that this issue affects products that are no longer actively supported by the vendor, increasing the risk for users still operating affected versions. As the exploit details have been publicly released, it poses a serious security risk that users must address promptly.

Affected Version(s)

DIR-878 1.20B05

References

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

ha ha-yang (VulDB User)
.