CVE-2026-4182 - Vulnerability Analysis

Overview

D-Link DIR-816 1.10CNB05 contains a stack-based buffer overflow caused by manipulation of the arguments key1/key2/key3/key4/pskValue in /goform/form2Wl5RepeaterStep2.cgi, letting remote attackers execute code, exploit requires crafted request.

Severity & Score

Impact

Remote attackers can execute arbitrary code, potentially leading to full system compromise.

Mitigation

Update to the latest available version or replace unsupported product.

References

• https://vuldb.com/?ctiid.351086
• https://vuldb.com/?id.351086
• https://vuldb.com/?submit.769830
• https://www.dlink.com/
• https://github.com/wudipjq/my_vuln/blob/main/D-Link7/vuln_86/86.md

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 16, 2026

🔴 CVE-2026-4182 - Critical (9.8) A weakness has been identified in D-Link DIR-816 1.10CNB05. This impacts an unknown function of the file /goform/form2Wl5RepeaterStep2.cgi of the component goahead. This manipulation of the argument key1/key2/key3/key4/pskValue causes stack-based ... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-4182/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner