D-Link Dir-878 vulnerabilities
5 known vulnerabilities affecting d-link/dir-878.
Total CVEs
5
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL2HIGH2MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2026-90693P2CRITICALCVSS 9.9v120B052026-09-14
CVE-2026-90693 [CRITICAL] CWE-119 CVE-2026-90693: A flaw has been found in D-Link DIR-878 120B05. This impacts the function SetWan3Settings of the com
A flaw has been found in D-Link DIR-878 120B05. This impacts the function SetWan3Settings of the component WAN Settings. This manipulation of the argument Primary/Secondary causes stack-based buffer overflow. Remote exploitation of the attack is possible.
nvd
CVE-2026-90692P2CRITICALCVSS 9.9v120B052026-09-14
CVE-2026-90692 [CRITICAL] CWE-119 CVE-2026-90692: A vulnerability was detected in D-Link DIR-878 120B05. This affects the function SetDynamicDNSIPv6Se
A vulnerability was detected in D-Link DIR-878 120B05. This affects the function SetDynamicDNSIPv6Settings of the component Dynamic DNS IPv6 Settings. The manipulation of the argument IPv6Address/Hostname results in stack-based buffer overflow. The attack may be launched remotely.
nvd
CVE-2022-26670P3HIGHCVSS 8.8≥ unspecified, ≤ 1.20b052022-04-07
CVE-2022-26670 [HIGH] CWE-78 CVE-2022-26670: D-Link DIR-878 has inadequate filtering for special characters in the webpage input field. An unauth
D-Link DIR-878 has inadequate filtering for special characters in the webpage input field. An unauthenticated LAN attacker can perform command injection attack to execute arbitrary system commands to control the system or disrupt service.
nvd
CVE-2025-0481P3HIGHCVSS 7.5v1.032025-01-15
CVE-2025-0481 [HIGH] CWE-200 CVE-2025-0481: A vulnerability classified as problematic has been found in D-Link DIR-878 1.03. Affected is an unkn
A vulnerability classified as problematic has been found in D-Link DIR-878 1.03. Affected is an unknown function of the file /dllog.cgi of the component HTTP POST Request Handler. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
nvd
CVE-2024-0717P3MEDIUMCVSS 5.3v202401122024-01-19
CVE-2024-0717 [MEDIUM] CWE-200 CVE-2024-0717: A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DI
A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, DIR-842, DIR-842S, DIR-843, DIR-853, DIR-878, DIR-882, DIR-1210, DIR-1260, DIR-2150, DIR-X1530,
nvd