Summary
generated automatically from NVD dataCVE-2026-90692 affects the D-Link DIR-878 router, version 120B05, in the SetDynamicDNSIPv6Settings function of its Dynamic DNS IPv6 Settings component. Manipulating the IPv6Address or Hostname argument triggers a stack-based buffer overflow (CWE-119), and the attack can be launched remotely. The flaw carries a CVSS v3.1 score of 9.9 (CRITICAL).
NVD description
A vulnerability was detected in D-Link DIR-878 120B05. This affects the function SetDynamicDNSIPv6Settings of the component Dynamic DNS IPv6 Settings. The manipulation of the argument IPv6Address/Hostname results in stack-based buffer overflow. The attack may be launched remotely.
EPSS · FIRST.org
0.91%probability of exploitation in the next 30 days
Higher than 59% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-16, recomputed daily by FIRST.org.
In-depth analysis on cveo.tech
We've published a detailed analysis of this CVE — exploitation, IOCs and mitigation.
CVSS v3.1 Score
Information
- Published
- 14 sept. 2026
- Updated
- 15 sept. 2026
- Status
- Deferred
- Source
- cna@vuldb.com
Weaknesses (CWE)
Similar CVEs
Other vulnerabilities of type CWE-119
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.