Description
A weakness has been identified in D-Link DIR-882 up to 20260814. Impacted is the function main of the file /HNAP1/dllog.cgi of the component CGI Binary. Executing a manipulation can lead to information disclosure. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| D-Link | DIR-882 | 20260814 | — |
References
- VDB-403475 | D-Link DIR-882 CGI Binary dllog.cgi main information disclosure vdb-entry technical-description
- VDB-403475 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-90881 | CVE Analysis and Report third-party-advisory
- Submit #929152 | D-Link DIR-882 A1 Information Disclosure third-party-advisory
- https://github.com/limou89/somevul/blob/main/D-Link_DIR-882_A1_dllog_dlquickvpnsettings_Information_Disclosure.md exploit
- https://www.dlink.com/ product