Exploitation observed; activity peaked at 4 mentions and remains active
Recommended action window: Immediate (within 24h)
NVD description
A flaw has been found in D-Link DIR-868L 110b03. This affects the function sub_1BF84 of the component SSDP Service. This manipulation of the argument ST causes os command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-03-03 | 4 | Disclosure4 |
| 2026-03-04 | 3 | Active Exploitation1Disclosure1PoC1 |
| 2026-03-05 | 1 | Patch1 |
| 2026-03-06 | 1 | Patch1 |
OS Command Injection Vulnerability discovered in #D-Link. Users are advised to follow OEM Security Advisory to remain safe! #CVE-2026-3485 https://nvd.nist.gov/vuln/detail/CVE-2026-3485
Post summary
A newly discovered OS command injection bug in D‑Link devices is announced, and users are advised to follow the OEM security advisory for patching or mitigation.
dlink dir-868l ssdp command injection URL: https://nvd.nist.gov/vuln/detail/CVE-2026-3485 Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 8.9
Post summary
CVE‑2026‑3485 affects the D‑Link DIR‑868L by enabling command injection, rated Critical with a CVSSv3.1 score of 8.9; an official vendor fix has been published.
🔴 CVE-2026-3485 - Critical A flaw has been found in D-Link DIR-868L 110b03. This affects the function sub_1BF84 of the component SSDP Service. This manipulation of the argument ST causes os command injection. It is ... https://www.thehackerwire.com/vulnerability/CVE-2026-3485/ https://t.co/vZZW726VOn
Post summary
A critical OS command injection vulnerability was disclosed in the D-Link DIR-868L’s SSDP Service, affecting function sub_1BF84 via manipulation of the ST argument.
D-Link DIR-868L SSDP Service sub_1BF84 os command injection CVE: CVE-2026-3485 PT-Identifier: PT-2026-22824 Vendor: D-link Product: DIR-868L CVSS: 9.3 Credits: Xuhsy (VulDB User) Description: A flaw has been found in D-Link DIR-868L 110b03. This affects the function sub_1BF84 of the component SSDP Service. This manipulation of the argument ST causes os command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. This vulnerability only affects products that are no longer supported by the maintainer. References: • https://dbugs.ptsecurity.com/vulnerability/CVE-2026-3485 -> (https://dbugs.ptsecurity.com/vulnerability/CVE-2026-3485) • https://vuldb.com/?id.348560 -> (https://vuldb.com/?id.348560) • https://vuldb.com/?ctiid.348560 -> (https://vuldb.com/?ctiid.348560) • https://vuldb.com/?submit.764759 -> (https://vuldb.com/?submit.764759) • https://kn0sinna.notion.site/dlink-dir-868l-ssdp-command-injection-30eb1876cd6e80caa691de6fe5cab59c -> (https://kn0sinna.notion.site/dlink-dir-868l-ssdp-command-injection-30eb1876cd6e80caa691de6fe5cab59c) • https://www.dlink.com/ -> (https://www.dlink.com/) #dbugs_vuln
Post summary
A new OS command injection vulnerability (CVE-2026-3485) was disclosed for unsupported D‑Link DIR‑868L routers; an exploit has been published, but no active attacks or patch information are reported.
Our CTI team identified a lot of activities targeting D-Link DIR-868L (CVE-2026-3485) https://vuldb.com/?ctiid.348560
Post summary
CTI team reports widespread activity targeting D-Link DIR-868L CVE-2026-3485, indicating active exploitation in the wild.
[CVE-2026-3485: CRITICAL] Critical vulnerability discovered in D-Link DIR-868L 110b03, allowing remote OS command injection. Exploit published for non-supported products. #CyberSecurity#cve,CVE-2026-3485,#cybersecurity https://cvefind.com/CVE-2026-3485
Post summary
A critical OS command injection vulnerability (CVE-2026-3485) in the D‑Link DIR‑868L 110b03 was disclosed, with an exploit reportedly available but no details on patches or active exploitation.
🚨*CVE* CVE-2026-3485 A flaw has been found in D-Link DIR-868L 110b03. This affects the function sub_1BF84 of the component SSDP Service. This manipulation of the argument ST causes os comma… https://www.cve.org/CVERecord?id=CVE-2026-3485 ----- Traducción: Se ha encontrado … http://infoflow.cloud`
Post summary
The post announces the discovery of CVE-2026-3485 in D‑Link DIR‑868L, detailing the affected component and function but offering no proof‑of‑concept, exploit code, or patch information.
CVE-2026-3485 A flaw has been found in D-Link DIR-868L 110b03. This affects the function sub_1BF84 of the component SSDP Service. This manipulation of the argument ST causes os comma… https://www.cve.org/CVERecord?id=CVE-2026-3485
Post summary
A vulnerability was identified in the SSDP service of the D-Link DIR-868L 110b03, affecting the sub_1BF84 function via manipulation of the ST argument.
We have just added an important vulnerability affecting D-Link DIR-868L (CVE-2026-3485) https://vuldb.com/?id.348560
Post summary
A new vulnerability, CVE-2026-3485, affecting the D-Link DIR-868L router has been added to the vulnerability database.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | dir-868l | - | - | - |
| OS | dlink | dir-868l_firmware | 110b03 | - | - |