Summary
generated automatically from NVD dataCVE-2026-90693 affects the D-Link DIR-878 router, firmware 120B05. The SetWan3Settings function in the WAN Settings component mishandles the Primary/Secondary argument, which causes a stack-based buffer overflow (CWE-119). The flaw can be triggered remotely and could compromise confidentiality, integrity and availability. It carries a CVSS v3.1 score of 9.9 (CRITICAL).
NVD description
A flaw has been found in D-Link DIR-878 120B05. This impacts the function SetWan3Settings of the component WAN Settings. This manipulation of the argument Primary/Secondary causes stack-based buffer overflow. Remote exploitation of the attack is possible.
EPSS · FIRST.org
0.91%probability of exploitation in the next 30 days
Higher than 59% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-19, recomputed daily by FIRST.org.
CVSS v3.1 Score
Information
- Published
- 14 sept. 2026
- Updated
- 15 sept. 2026
- Status
- Deferred
- Source
- cna@vuldb.com
Weaknesses (CWE)
References (7)
Similar CVEs
Other vulnerabilities of type CWE-119
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.