CVE-2026-110536
A vulnerability was determined in D-Link DIR-868L 2.01b05
- Risk score
- 82/100
- CVSS
- 10.0 v3.1
- Exploit chance (30 days)
- 2.9%
- Published
- 14 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipulation of the argument SOAPACTION can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclosed an…
- Affected
- See advisory
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Why it is Red
- CVSS 10.0 critical
- Remotely exploitable without logging in
References
- https://github.com/Walnut1337/Command-Injection-DIR-868L/blob/main/ADVISORY.md
- https://github.com/Walnut1337/Command-Injection-DIR-868L/tree/main/poc
- https://vuldb.com/cve/CVE-2026-110536
- https://vuldb.com/submit/1003692
- https://vuldb.com/submit/1003693
- https://vuldb.com/vuln/419825
- https://vuldb.com/vuln/419825/cti
- https://www.dlink.com/
Original description
A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipulation of the argument SOAPACTION can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Last activity 14 Oct 2026. Patch Forecast updates every hour.