<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:webfeeds="http://webfeeds.org/rss/1.0"><channel><title>DIR-878 (1.20B05) - CraftedSignal Threat Feed</title><link>https://feed.craftedsignal.io/products/dir-878-1.20b05/</link><description>Trending threats, MITRE ATT&amp;CK coverage, and detection metadata. Fed continuously.</description><generator>Hugo</generator><language>en</language><managingEditor>hello@craftedsignal.io</managingEditor><webMaster>hello@craftedsignal.io</webMaster><lastBuildDate>Mon, 09 Nov 2026 05:28:48 +0000</lastBuildDate><atom:link href="https://feed.craftedsignal.io/products/dir-878-1.20b05/feed.xml" rel="self" type="application/rss+xml"/><image><url>https://feed.craftedsignal.io/favicon-32x32.png</url><title>CraftedSignal Threat Feed</title><link>https://feed.craftedsignal.io/</link><width>32</width><height>32</height></image><webfeeds:icon>https://feed.craftedsignal.io/favicon.svg</webfeeds:icon><item><title>D-Link DIR-878: SetWanSettings buffer overflow (CVE-2026-124563)</title><link>https://feed.craftedsignal.io/briefs/2026-11-dlink-dir878-overflow/</link><pubDate>Mon, 09 Nov 2026 05:28:48 +0000</pubDate><author>hello@craftedsignal.io</author><guid isPermaLink="true">https://feed.craftedsignal.io/briefs/2026-11-dlink-dir878-overflow/</guid><description>A buffer overflow vulnerability in the SetWanSettings function of the D-Link DIR-878 (1.20B05) HNAP Handler component allows for remote exploitation. Public exploits are available.</description><content:encoded>&lt;p>A security flaw has been discovered in the HNAP Handler component of D-Link DIR-878 firmware version 1.20B05. Manipulation of the Primary or Secondary arguments in the SetWanSettings function results in a buffer overflow. The attack can be launched remotely. The exploit has been released to the public. This vulnerability only affects products that are no longer supported by the maintainer.&lt;/p>
</content:encoded><category domain="severity">low</category><category domain="type">advisory</category><category>cve-2026-124563</category><category>buffer-overflow</category></item></channel></rss>