CVE-2026-90680

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G version 1.0.2B05 20181207

Description A security flaw exists in the HNAP1 component that allows a remote attacker to cause a stack-based buffer overflow. This occurs through the manipulation of the PAddress, SubnetMask, or Gateway arguments within the strcpy() function of the /HNAP1/SetStaticRouteSettings endpoint. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to memory corruption and impacting confidentiality, integrity, and availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the /HNAP1/SetStaticRouteSettings endpoint to minimize the risk of exploitation.