Is CVE-2026-90680 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-90680?

CVE-2026-90680 has a CVSS v3 severity of CRITICAL (9.9).

Back

CVE-2026-90680

Description

A security flaw has been discovered in D-Link DIR-823G 1.0.2B05_20181207. The impacted element is the function strcpy of the file /HNAP1/SetStaticRouteSettings of the component HNAP1. The manipulation of the argument PAddress/SubnetMask/Gateway results in stack-based buffer overflow. The attack can be launched remotely.