CVE-2026-4181 - Vulnerability Analysis

Overview

D-Link DIR-816 1.10CNB05 contains a stack-based buffer overflow caused by manipulation of the arguments key1/key2/key3/key4/pskValue in /goform/form2RepeaterStep2.cgi component goahead, letting remote attackers execute arbitrary code, exploit requires no special privileges.

Severity & Score

Impact

Remote attackers can execute arbitrary code, potentially leading to full system compromise.

Mitigation

Update to the latest supported version or replace unsupported product.

References

• https://github.com/wudipjq/my_vuln/blob/main/D-Link7/vuln_85/85.md
• https://vuldb.com/?ctiid.351085
• https://vuldb.com/?id.351085
• https://vuldb.com/?submit.769829
• https://www.dlink.com/

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner