CVE-2026-90881D-Link DIR-882 CGI Binary dllog.cgi main information disclosure

Descripción

A weakness has been identified in D-Link DIR-882 up to 20260814. Impacted is the function main of the file /HNAP1/dllog.cgi of the component CGI Binary. Executing a manipulation can lead to information disclosure. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• VDB-403475 | D-Link DIR-882 CGI Binary dllog.cgi main information disclosure vdb-entrytechnical-description
• VDB-403475 | CTI Indicators (IOB, IOC, TTP, IOA) signaturepermissions-required
• CVE-2026-90881 | CVE Analysis and Report third-party-advisory
• Submit #929152 | D-Link DIR-882 A1 Information Disclosure third-party-advisory
• https://github.com/limou89/somevul/blob/main/D-Link_DIR-882_A1_dllog_dlquickvpnsettings_Information_Disclosure.md exploit
• https://www.dlink.com/ product