Exploitation observed; activity peaked at 3 mentions and remains active
Recommended action window: Immediate (within 24h)
NVD description
A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the file /web/cgi-bin/greece/rhea of the component HTTP Handler. Such manipulation of the argument data leads to format string. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-06-13 | 2 | Disclosure1General1 |
| 2026-06-14 | 3 | Active Exploitation1Disclosure1Patch1 |
| 2026-06-15 | 1 | Exploit1 |
| 2026-06-25 | 1 | Disclosure1 |
High-severity CVE-2026-12174 (CVSS 9.0) affects D-Link DCS-935L 1.10.01 HTTP handler. Review deployed devices and apply patches if available. via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/27LMh1HP3x
Post summary
A brief tweet alerts to a high-severity CVE-2026-12174 affecting D-Link DCS-935L’s HTTP handler, urging review of devices and application of available patches.
[CVE Analysis] CVE-2026-12174: Format String Flaw in D-Link DCS-935L HTTP Handler Enables Remote Code Execution https://breachspider.com/intel/2026-06-25-cve-2026-12174-format-string-flaw-in-d-link-dcs-935l-http-ha #ICS #OTSecurity #SCADA #CriticalInfrastructure
Post summary
The post announces CVE-2026-12174, a format string vulnerability in the D-Link DCS‑935L HTTP handler that allows remote code execution; no PoC, exploit tools, patches, or active exploitation claims are provided.
# CVE-2026-12174 Exploit Kit ## Format String / RCE in D-Link DCS-935L IP Camera #exploit #0days #CVE #CVSS #security #hacking https://t.co/a8K4Hd0Yff
Post summary
The tweet announces CVE‑2026‑12174, identifying a format string RCE in a D‑Link camera, but provides no PoC, exploit code, patch information, or evidence of active exploitation.
Our CTI team identified a lot of activities targeting D-Link DCS-935L (CVE-2026-12174) https://vuldb.com/vuln/370815/cti
Post summary
CTI team reports multiple attacks targeting the D-Link DCS‑935L via CVE‑2026‑12174, indicating active exploitation in the wild.
CVE-2026-12174 A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the file /web/cgi-bin/greece/rhea of the component … https://www.cve.org/CVERecord?id=CVE-2026-12174
Post summary
A vulnerability in the D-Link DCS-935L firmware affecting the snprintf function in a CGI file has been identified and is documented in the CVE record.
CVE-2026-12174 Format String Vulnerability in D-Link DCS-935L 1.10.01 HTTP Handler https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-12174
Post summary
The brief entry announces a format‑string vulnerability (CVE‑2026‑12174) in the D-Link DCS‑935L 1.10.01 HTTP handler, without providing PoC, exploit, patch or active‑use details.
We have just added an important vulnerability affecting D-Link DCS-935L (CVE-2026-12174) https://vuldb.com/vuln/370815
Post summary
The message announces that CVE-2026-12174 affecting the D-Link DCS-935L has been added to a vulnerability database, without providing technical or exploit details.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | dcs-935l | - | - | - |
| OS | dlink | dcs-935l_firmware | 1.10.01 | - | - |