by Kastro
Paper/Archive/CVE-2026-110536

CVE-2026-110536

D-Link DIR-868L — D-Link DIR-868L HNAP CGI cgibin system os command injection

EPSS 3%public exploitCVSS 10.0
critical.is priorityof 100
57
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 87.1.871 × 2017.4Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipulation of the argument SOAPACTION can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

Affected

ProductAffectedFixed inSource
DIR-868L2.01b05–CNA

Scores by source

VulDB (CNA)10.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P
VulDB (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R
VulDB (CNA)10.0CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

writeupvuldb.com/vuln/419825refvuldb.com/vuln/419825/ctiwriteupvuldb.com/cve/CVE-2026-110536writeupvuldb.com/submit/1003692writeupvuldb.com/submit/1003693refgithub.com/Walnut1337/Command-Injection-DIR-868L/blob/main/ADVISORY.mdexploitgithub.com/Walnut1337/Command-Injection-DIR-868L/tree/main/pocrefdlink.com