Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-94089

D-Link DIR-868L Authentication webfa_authentication.cgi strcpy stack-based overflow

CVSS 4.0 10.0 CRITICALCVSS 3.1 10.0 CRITICALCVSS 3.0 10.0 CRITICALCVSS 2.0 10.0 Check source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-94089

Published

A vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy of the file /webfa_authentication.cgi of the component Authentication Handler. Executing a manipulation of the argument id/password can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-94089

Published

DIR-868L

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "D-Link",
                    "product": "DIR-868L",
                    "versions": [
                        {
                            "version": "2.01b05",
                            "status": "affected"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:h:d-link:dir-868l:*:*:*:*:*:*:*:*"
                    ],
                    "modules": [
                        "Authentication Handler"
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON