CVE-2026-110536: D-Link DIR-868L HNAP CGI cgibin system os command injection
A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipulation of the argument SOAPACTION can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
D-Link DIR-868L devices running version 2.01b05 are identified as affected. The vulnerable functionality is the HNAP CGI Handler at /htdocs/cgibin.
What does an attacker need to exploit it?
The attack can be launched remotely and requires manipulation of the SOAPACTION argument processed by the system function. The supplied data indicates no privileges or user interaction are required.
How serious is successful exploitation?
Successful exploitation can result in operating-system command injection. The reported vector indicates high impacts to confidentiality, integrity, and availability, and the scope may change.
Is exploitation likely in practice?
A public exploit disclosure exists and may be used. This raises the likelihood that exposed devices could be targeted.