CVE-2026-90693: D-Link DIR-878 WAN Settings SetWan3Settings stack-based overflow
A flaw has been found in D-Link DIR-878 120B05. This impacts the function SetWan3Settings of the component WAN Settings. This manipulation of the argument Primary/Secondary causes stack-based buffer overflow. Remote exploitation of the attack is possible.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
The affected product identified is the D-Link DIR-878 running version 120B05. The vulnerable functionality is in the WAN Settings component, specifically the SetWan3Settings function.
What access does an attacker need to exploit the overflow?
Remote exploitation is possible, and the vector indicates network access with low attack complexity and no user interaction. The supplied severity vector also indicates that low privileges are required.
What is the potential impact of successful exploitation?
The provided severity vector rates the issue as critical with high confidentiality, integrity, and availability impact. It also indicates the vulnerability can affect components beyond the vulnerable security authority.