CVE-2026-90692Disclosure

LOWCVSS 9.4 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was detected in D-Link DIR-878 120B05. This affects the function SetDynamicDNSIPv6Settings of the component Dynamic DNS IPv6 Settings. The manipulation of the argument IPv6Address/Hostname results in stack-based buffer overflow. The attack may be launched remotely.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-119CWE-121

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Full discourse1 post

Rıdvan Yağlı@ridvanyagli45d
Disclosure
🔴 D-Link DIR-878'da kritik güvenlik açığı! CVE-2026-90692, D-Link DIR-878 router'larının Dynamic DNS IPv6 Settings bileşenindeki SetDynamicDNSIPv6Settings fonksiyonunu etkiliyor. Saldırganın IPv6Address/Hostname parametresini manipüle etmesi, stack-based buffer overflow oluşmasına neden olabiliyor. 🌐 Uzaktan istismar edilebiliyor. ⚠️ CVSS 3.1: 9.9 — Kritik ⚠️ CVSS 4.0: 9.4 — Kritik Etkilenen sürüm: DIR-878 120B05 📌 DIR-878'un destek ömrü de sona ermiş durumda. Cihazı kullananların mümkünse desteklenen güncel bir router'a geçmesi öneriliyor.
Post summary
The tweet discloses a newly assigned CVE‑2026‑8969‑2 affecting D‑Link DIR‑8878 v120B05, detailing a stack‑based buffer overflow in the Dynamic DNS IPv6 Settings component that can be triggered remotely via manipulation of the IPv6Address/Hostname parameter, with high CVSS scores, and notes the device is end‑of‑life.
00010244
2.3K followersView on X

Explore more

Back to dashboard