Exploitation observed; activity peaked at 3 mentions and remains active
Recommended action window: Immediate (within 24h)
NVD description
A vulnerability was found in D-Link DCS-935L up to 1.10.01. The impacted element is the function SetDeviceSettings of the file /web/cgi-bin/hnap/hnap_service of the component HNAP Service. The manipulation of the argument AdminPassword results in buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.
Priority
HIGH
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
| Date | Total | Labels |
|---|
| 2026-05-10 | 1 | Disclosure1 |
| 2026-05-11 | 3 | Active Exploitation1Exploit1General1 |
| 2026-05-12 | 1 | PoC1 |
| 2026-05-22 | 1 | Disclosure1 |
A new vulnerability with increased severity was disclosed for D-Link DCS-935L (CVE-2026-8260) https://vuldb.com/vuln/362557
Post summary
A new vulnerability (CVE-2026-8260) with increased severity for the D-Link DCS-935L has been disclosed, with a reference to the vulnerability database entry.
⚠️ Vulnerabilidad en productos D-Link ❗ CVE-2026-8260 ➡️ Más info: https://www.cert.gov.py/vulnerabilidad-en-productos-d-link-3/ https://t.co/Sck7w55Sul
Post summary
A short tweet announcing a new vulnerability in D-Link products (CVE‑2026‑8260) and providing a link to a more detailed article.
🚨 CVE-2026-8260: Buffer overflow in D-Link DCS-935L ≤1.10.01. HNAP Service exploitable remotely via AdminPassword. Public exploit live. Isolate devices, disable HNAP, or patch now. https://0x2ed3bb60.xyz/threat/e8d1d6291140a59d
Post summary
The post announces a publicly available buffer overflow exploit for D-Link DCS-935L and urges users to patch or disable HNAP to mitigate the active threat.
csirt_it: ‼ #DLink: disponibile #PoC per lo sfruttamento della CVE-2026-8260, presente nel prodotto #DCS-935L Rischio: 🟠 Tipologia: 🔸 Remote Code Execution 🔸 Privilege Escalation 🔗 https://www.acn.gov.it/portale/w/d-link-poc-pubblico-per-lo-sfruttamento-della-cve-2026-8260 🔄 Aggiornamenti disponibili 🔄 https://t.co/76WTHwtB5W
Post summary
The tweet announces a publicly available Proof of Concept for CVE‑2026‑8260 affecting DLink DCS‑935L, highlighting RCE and privilege escalation, with no evidence of active exploitation or patch information.
CVE-2026-8260 A vulnerability was found in D-Link DCS-935L up to 1.10.01. The impacted element is the function SetDeviceSettings of the file /web/cgi-bin/hnap/hnap_service of the com… https://www.cve.org/CVERecord?id=CVE-2026-8260
Post summary
The post merely identifies a CVE affecting a D‑Link device, specifying the vulnerable file and function, but provides no evidence of a PoC, exploit, active exploitation, patch, or debunking.
D-Link DCS-935L CVE-2026-8260: Active buffer overflow exploit lets attackers execute arbitrary code, potentially affecting thousands of devices. Patch now to prevent full compromise. #NerdieNews #CyberSecurity #InfoSec #Vulnerability https://t.co/dZlW5PQyvK
Post summary
CVE‑2026‑8260, a buffer overflow affecting thousands of D‑Link DCS‑935L devices, is being actively exploited with arbitrary code execution; a patch is now available to prevent full compromise.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | dcs-935l | - | - | - |
| OS | dlink | dcs-935l_firmware | - | - | - |