CVE-2026-90693
Medium
Elevated severity or exploit probability.
CVSS base
9.9
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS — probability of exploitation (30 days)
0.9%
58.2th percentile
CISA KEV
Not listed
Weakness / dates
CWE-119
Published 2026-09-14 · modified 2026-09-15
Description
A flaw has been found in D-Link DIR-878 120B05. This impacts the function SetWan3Settings of the component WAN Settings. This manipulation of the argument Primary/Secondary causes stack-based buffer overflow. Remote exploitation of the attack is possible.
References
- https://github.com/Amalll-Sec/router-vulnerability-research/blob/main/advisories/d-link/dir-878/SetWan3Settings/README.md
- https://vuldb.com/cve/CVE-2026-90693
- https://vuldb.com/submit/915573
- https://vuldb.com/vuln/403226
- https://vuldb.com/vuln/403226/cti
- https://www.dlink.com/
- https://github.com/Amalll-Sec/router-vulnerability-research/blob/main/advisories/d-link/dir-878/SetWan3Settings/README.md