CVE-2026-124560 | D-Link DIR-878 1.20B05 HNAP bin/prog.cgi GetCAPTCHAsetting uid heap-based overflow

November 8, 2026 Yanac

A vulnerability marked as very critical has been reported in D-Link DIR-878 1.20B05. This affects the function GetCAPTCHAsetting of the file bin/prog.cgi of the component HNAP Handler. Performing a manipulation of the argument uid results in heap-based buffer overflow. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is identified as CVE-2026-124560. The attack can be initiated remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More