CVE-2026-90680: Stack-based Buffer Overflow in D-Link DIR-823G
CVE-2026-90680 is a critical stack-based buffer overflow vulnerability in the D-Link DIR-823G router version 1.0.2B05_20181207. It arises from improper handling of input parameters in the strcpy function within the /HNAP1/SetStaticRouteSettings component. This flaw can be exploited remotely without user interaction, potentially allowing an attacker to execute arbitrary code or cause a denial of service.
AI Analysis
Technical Summary
This vulnerability exists in the D-Link DIR-823G router firmware version 1.0.2B05_20181207. The strcpy function in the /HNAP1/SetStaticRouteSettings endpoint improperly handles the PAddress, SubnetMask, and Gateway arguments, leading to a stack-based buffer overflow. The flaw can be triggered remotely, requiring no user interaction and low attack complexity, resulting in high impact on confidentiality, integrity, and availability as per the CVSS 4.0 score of 9.4.
Potential Impact
Successful exploitation can lead to remote code execution or denial of service on the affected device. The vulnerability compromises the confidentiality, integrity, and availability of the router, potentially allowing attackers to control network traffic or disrupt network services.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are currently provided. Until a patch is available, restricting remote access to the affected endpoint and disabling HNAP1 services if possible may reduce exposure.
CVE-2026-90680: Stack-based Buffer Overflow in D-Link DIR-823G
Description
CVE-2026-90680 is a critical stack-based buffer overflow vulnerability in the D-Link DIR-823G router version 1.0.2B05_20181207. It arises from improper handling of input parameters in the strcpy function within the /HNAP1/SetStaticRouteSettings component. This flaw can be exploited remotely without user interaction, potentially allowing an attacker to execute arbitrary code or cause a denial of service.
CVSS v4.0
Score 9.4critical
Affected software
D-Link
DIR-823G
cpe:2.3:h:d-link:dir-823g:*:*:*:*:*:*:*:*AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability exists in the D-Link DIR-823G router firmware version 1.0.2B05_20181207. The strcpy function in the /HNAP1/SetStaticRouteSettings endpoint improperly handles the PAddress, SubnetMask, and Gateway arguments, leading to a stack-based buffer overflow. The flaw can be triggered remotely, requiring no user interaction and low attack complexity, resulting in high impact on confidentiality, integrity, and availability as per the CVSS 4.0 score of 9.4.
Potential Impact
Successful exploitation can lead to remote code execution or denial of service on the affected device. The vulnerability compromises the confidentiality, integrity, and availability of the router, potentially allowing attackers to control network traffic or disrupt network services.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are currently provided. Until a patch is available, restricting remote access to the affected endpoint and disabling HNAP1 services if possible may reduce exposure.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-09-13T04:47:27.543Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6aa8711955bf5e2cf5b48bed
Added to database: 09/14/2026, 22:11:37 UTC
Last enriched: 09/14/2026, 22:14:45 UTC
Last updated: 09/14/2026, 22:21:29 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.