D-Link DIR-878: Heap-based buffer overflow in HNAP handler (CVE-2026-124560)
A public proof-of-concept exploit is available for a remote heap-based buffer overflow in the D-Link DIR-878 HNAP handler.
CVE search metadata
CVE search record: CVE-2026-124560. Severity: critical. CVSS: 9.8. KEV: no. Product: D-Link DIR-878 (1.20B05). Brief: D-Link DIR-878: Heap-based buffer overflow in HNAP handler (CVE-2026-124560). Brief link: https://feed.craftedsignal.io/briefs/2026-11-dlink-dir-878-overflow/
Triage facts
Revision 1- Applicability
- D-Link DIR-878 (1.20B05)
- Evidence
- Unknown
- Severity
- High
- Sources
- 3 public sources
- Freshness
- Revision 1Nov 9, 06:19 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- C3Roughly even chance
A vulnerability exists in the D-Link DIR-878 (version 1.20B05) within the GetCAPTCHAsetting function of the bin/prog.cgi file in the HNAP Handler component. Manipulating the uid argument results in a heap-based buffer overflow. The attack can be initiated remotely. The vulnerability affects products no longer supported by the maintainer, and a public proof-of-concept exploit is available.