Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-90680

D-Link DIR-823G HNAP1 SetStaticRouteSettings strcpy stack-based overflow

CVSS 4.0 9.4 CRITICALCVSS 3.1 9.9 CRITICALCVSS 3.0 9.9 CRITICALCVSS 2.0 9.0 Check source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-90680

Published

A security flaw has been discovered in D-Link DIR-823G 1.0.2B05_20181207. The impacted element is the function strcpy of the file /HNAP1/SetStaticRouteSettings of the component HNAP1. The manipulation of the argument PAddress/SubnetMask/Gateway results in stack-based buffer overflow. The attack can be launched remotely.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-90680

Published

DIR-823G

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "D-Link",
                    "product": "DIR-823G",
                    "versions": [
                        {
                            "version": "1.0.2B05_20181207",
                            "status": "affected"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:h:d-link:dir-823g:*:*:*:*:*:*:*:*"
                    ],
                    "modules": [
                        "HNAP1"
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON