{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/dir-878-1.20b05/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:d_link:dir_878:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-124563"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["DIR-878 (1.20B05)"],"_cs_severities":["low"],"_cs_tags":["cve-2026-124563","buffer-overflow"],"_cs_type":"advisory","_cs_vendors":["D-Link"],"content_html":"\u003cp\u003eA security flaw has been discovered in the HNAP Handler component of D-Link DIR-878 firmware version 1.20B05. Manipulation of the Primary or Secondary arguments in the SetWanSettings function results in a buffer overflow. The attack can be launched remotely. The exploit has been released to the public. This vulnerability only affects products that are no longer supported by the maintainer.\u003c/p\u003e\n","date_modified":"2026-11-09T05:28:48Z","date_published":"2026-11-09T05:28:48Z","id":"https://feed.craftedsignal.io/briefs/2026-11-dlink-dir878-overflow/","summary":"A buffer overflow vulnerability in the SetWanSettings function of the D-Link DIR-878 (1.20B05) HNAP Handler component allows for remote exploitation. Public exploits are available.","title":"D-Link DIR-878: SetWanSettings buffer overflow (CVE-2026-124563)","url":"https://feed.craftedsignal.io/briefs/2026-11-dlink-dir878-overflow/"}],"language":"en","title":"CraftedSignal Threat Feed - DIR-878 (1.20B05)","version":"https://jsonfeed.org/version/1.1"}