Description
A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipulation of the argument SOAPACTION can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| D-Link | DIR-868L | 2.01b05 | — |
References
- VDB-419825 | D-Link DIR-868L HNAP CGI cgibin system os command injection vdb-entry technical-description
- VDB-419825 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-110536 | CVE Analysis and Report third-party-advisory
- Submit #1003692 | D-Link DIR-868L Hardware rev B1, firmware 2.01b05 (web interface / HNAP, component /htdocs/cgibin) Command Injection third-party-advisory
- Submit #1003693 | D-Link DIR-868L Hardware rev B1, firmware 2.01b05 (web interface / HNAP, component /htdocs/cgibin) Command Injection (Duplicate) third-party-advisory
- https://github.com/Walnut1337/Command-Injection-DIR-868L/blob/main/ADVISORY.md broken-link
- https://github.com/Walnut1337/Command-Injection-DIR-868L/tree/main/poc exploit
- https://www.dlink.com/ product