Home / Vulnerability Intelligence / CVE-2026-4184

CVE-2026-4184 - Vulnerability Analysis

CriticalCVSS: 9.8

Last Updated: March 16, 2026

Published: March 16, 2026Updated: March 16, 2026Remote Exploitable

Overview

A vulnerability was detected in D-Link DIR-816 1.10CNB05. Affected by this vulnerability is an unknown functionality of the file /goform/form2Wl5BasicSetup.cgi of the component goahead. Performing a manipulation of the argument pskValue results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Severity & Score

Severity: Critical

CVSS Score: 9.8

EPSS Score: 6.1%(Probability of exploitation in next 30 days)

References

Social Media Activity(2 posts)

Offensive Sequence

@offseq

Mar 15, 2026

⚠️ CRITICAL: D-Link DIR-816 (1.10CNB05) stack-based buffer overflow via pskValue in /goform/form2Wl5BasicSetup.cgi. Exploit is public, remote code execution possible. Device is EOL — isolate or replace! CVE-2026-4184 https://radar.offseq.com/threat/cve-2026-4184-stack-based-buffer-overflow-in-d-lin-8b4d54d9 #OffSeq #DLink #Vuln

View original post

Offensive Sequence

@offseq

Mar 15, 2026

View original post

Related Resources

Details

CVE ID: CVE-2026-4184
Severity: Critical
CVSS Score: 9.8
Status: unconfirmed
EPSS: 6.1%
Social Posts: 2

CWE

CWE-119

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

6.1%Probability of exploitation in the next 30 days