{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/dir-878-120b05/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:d_link:dir_878:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.9,"id":"CVE-2026-90692"},{"id":"CVE-2026-90693"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["DIR-878 (120B05)"],"_cs_severities":["critical"],"_cs_tags":["remote-code-execution","network-security","buffer-overflow","network-device","vulnerability"],"_cs_type":"advisory","_cs_vendors":["D-Link"],"content_html":"\u003cp\u003eD-Link DIR-878 routers running firmware version 120B05 contain a critical stack-based buffer overflow vulnerability in the SetDynamicDNSIPv6Settings function. This vulnerability resides within the device's Dynamic DNS IPv6 settings component. An unauthenticated remote attacker can exploit this flaw by sending a specially crafted request containing malicious input in the IPv6Address or Hostname arguments to the vulnerable function. Successful exploitation allows for arbitrary code execution with the privileges of the web service process. Given the nature of the overflow, it likely facilitates remote exploitation without requiring local access or previous authentication. This poses a significant risk to the availability and integrity of affected network edge devices.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of this vulnerability allows an attacker to achieve remote code execution on the router. This can lead to total device compromise, allowing the attacker to intercept network traffic, modify DNS settings for man-in-the-middle attacks, or utilize the compromised device as a pivot point for further lateral movement within the local area network.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMonitor for unauthorized attempts to access or modify dynamic DNS configurations on network edge devices.\u003c/li\u003e\n\u003cli\u003eAudit network access control lists to ensure web management interfaces of routers like the D-Link DIR-878 are not exposed to the public internet.\u003c/li\u003e\n\u003cli\u003eContact D-Link support or check official vendor channels immediately for firmware updates that address the identified CVE-2026-90692 vulnerability.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-09-14T09:31:55Z","date_published":"2026-09-14T07:31:01Z","id":"https://feed.craftedsignal.io/briefs/2026-09-14-dlink-buffer-overflow/","summary":"A critical stack-based buffer overflow vulnerability in the D-Link DIR-878 router enables remote code execution via malformed Dynamic DNS IPv6 configuration parameters.","title":"Remote Stack-based Buffer Overflow in D-Link DIR-878","url":"https://feed.craftedsignal.io/briefs/2026-09-14-dlink-buffer-overflow/"}],"language":"en","title":"CraftedSignal Threat Feed - DIR-878 (120B05)","version":"https://jsonfeed.org/version/1.1"}