D-Link Dir-868L vulnerabilities

CVE-2026-110536 [CRITICAL] CWE-77 CVE-2026-110536: A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the f A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipulation of the argument SOAPACTION can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

CVE-2026-3485 [CRITICAL] CWE-77 CVE-2026-3485: A flaw has been found in D-Link DIR-868L 110b03. This affects the function sub_1BF84 of the componen A flaw has been found in D-Link DIR-868L 110b03. This affects the function sub_1BF84 of the component SSDP Service. This manipulation of the argument ST causes os command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. This vulnerability only affects products that are no longer supported by t

CVE-2026-94089 [CRITICAL] CWE-119 CVE-2026-94089: A vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy of A vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy of the file /webfa_authentication.cgi of the component Authentication Handler. Executing a manipulation of the argument id/password can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been publicly disclosed a