CVE-2026-82680: Out-of-bounds Write in D-Link DSM-G600

This vulnerability affects D-Link DSM-G600 version 1.01 and involves an out-of-bounds write in an unknown function within the Multipart Handler component, specifically in the /load_file.cgi file. The vulnerability allows remote attackers to manipulate the device to perform out-of-bounds memory writes. The CVSS 4.0 base score is 8.7, indicating high severity, with network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. Exploit code has been publicly released, but no official remediation or patch has been disclosed by the vendor.

Successful exploitation can lead to out-of-bounds memory writes, potentially allowing attackers to execute arbitrary code or cause denial of service on the affected device. The vulnerability can be exploited remotely without user interaction and requires low privileges, posing a significant risk to affected systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the affected device and monitor for exploitation attempts. Apply any vendor recommendations once available.