Exploit discussion active in current signal (3 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A security flaw has been discovered in D-Link DIR-816 1.10CNB05. This affects an unknown function of the file /goform/form2RepeaterStep2.cgi of the component goahead. The manipulation of the argument key1/key2/key3/key4/pskValue results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. This vulnerability only affects products that are no longer supported by the maintainer.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-03-15 | 1 | Exploit1 |
| 2026-03-16 | 3 | General2PoC1 |
CVE-2026-4181 A security flaw has been discovered in D-Link DIR-816 1.10CNB05. This affects an unknown function of the file /goform/form2RepeaterStep2.cgi of the component goahead. T… https://www.cve.org/CVERecord?id=CVE-2026-4181
Post summary
The statement announces a newly discovered vulnerability in D‑Link DIR‑816 with minimal technical details and no further information about exploits or mitigations.
🔴 CVE-2026-4181 - Critical A security flaw has been discovered in D-Link DIR-816 1.10CNB05. This affects an unknown function of the file /goform/form2RepeaterStep2.cgi of the component goahead. The manipulation of t... https://www.thehackerwire.com/vulnerability/CVE-2026-4181/ https://t.co/7pYfgiV4W7
Post summary
The post announces a critical flaw in a D‑Link router but provides minimal technical detail, no evidence of exploitation, and no mitigation information.
[CVE-2026-4181: CRITICAL] Security flaw in D-Link DIR-816 1.10CNB05 discovered - stack-based buffer overflow in /goform/form2RepeaterStep2.cgi component. Exploit released, affects unsupported products.#cve,CVE-2026-4181,#cybersecurity https://cvefind.com/CVE-2026-4181
Post summary
A critical stack-based buffer overflow was identified in the D-Link DIR-816 firmware, with an exploit released, though no patch or signs of active exploitation are reported.
D-Link DIR-816 goahead form2RepeaterStep2.cgi stack-based overflow CVE: CVE-2026-4181 PT-Identifier: PT-2026-25555 Vendor: D-link Product: DIR-816 CVSS: 9.3 Credits: pjqwudi (VulDB User) Description: A security flaw has been discovered in D-Link DIR-816 1.10CNB05. This affects an unknown function of the file /goform/form2RepeaterStep2.cgi of the component goahead. The manipulation of the argument key1/key2/key3/key4/pskValue results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. This vulnerability only affects products that are no longer supported by the maintainer. References: • https://dbugs.ptsecurity.com/vulnerability/CVE-2026-4181 • https://vuldb.com/?id.351085 • https://vuldb.com/?ctiid.351085 • https://vuldb.com/?submit.769829 • https://github.com/wudipjq/my_vuln/blob/main/D-Link7/vuln_85/85.md • https://www.dlink.com/ #dbugs_vuln
Post summary
CVE-2026-4181 is a stack-based buffer overflow in D-Link DIR-816's form2RepeaterStep2.cgi; publicly available exploit code exists, but there is no evidence of current active exploitation and no patch is mentioned.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | dir-816 | - | - | - |
| OS | dlink | dir-816_firmware | 1.10cnb05 | - | - |