CRITICAL

CVE-2026-94089

2026-09-20 CVSS v3.1

CVSS

Description

A vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy of the file /webfa_authentication.cgi of the component Authentication Handler. Executing a manipulation of the argument id/password can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.

Weakness (CWE)

CWE-119 Memory Buffer Bounds Error

CWE-121 Stack-based Buffer Overflow

References

https://github.com/Walnut1337/CVE/blob/main/poc/poc_crash.py https://vuldb.com/cve/CVE-2026-94089 https://vuldb.com/submit/951681 https://vuldb.com/vuln/408017 https://vuldb.com/vuln/408017/cti https://www.dlink.com/

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE