D-Link DIR-878: SetWanSettings buffer overflow (CVE-2026-124563)
A buffer overflow vulnerability in the SetWanSettings function of the D-Link DIR-878 (1.20B05) HNAP Handler component allows for remote exploitation. Public exploits are available.
CVE search metadata
CVE search record: CVE-2026-124563. Severity: high. CVSS: 7.5. KEV: no. Product: DIR-878 (1.20B05). Brief: D-Link DIR-878: SetWanSettings buffer overflow (CVE-2026-124563). Brief link: https://feed.craftedsignal.io/briefs/2026-11-dlink-dir878-overflow/
Triage facts
Revision 1- Applicability
- DIR-878 (1.20B05)
- Evidence
- Unknown
- Severity
- Low
- Sources
- 1 public source
- Freshness
- Revision 1Nov 9, 05:28 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
A security flaw has been discovered in the HNAP Handler component of D-Link DIR-878 firmware version 1.20B05. Manipulation of the Primary or Secondary arguments in the SetWanSettings function results in a buffer overflow. The attack can be launched remotely. The exploit has been released to the public. This vulnerability only affects products that are no longer supported by the maintainer.