CVE-2026-8260High· 8.8▾ TwilightA vulnerability was found in D-Link DCS-935L up to 1.10.01. The impacted element is the function SetDeviceSettings of the file /web/cgi-bin/hnap/hnap_service of the component HNAP Service. The manipulation of the argument AdminPassword r…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 30.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
1.0%
1.0% → 1.2%
A vulnerability was found in D-Link DCS-935L up to 1.10.01. The impacted element is the function SetDeviceSettings of the file /web/cgi-bin/hnap/hnap_service of the component HNAP Service. The manipulation of the argument AdminPassword results in buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.
dcs-935l_firmware <= 1.10.01Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-11339High· 8.8A vulnerability has been found in D-Link DI-7100G C1 up to 20250928
CVE-2025-11338High· 8.8A flaw has been found in D-Link DI-7100G C1 up to 20250928
CVE-2025-11408High· 8.8A security vulnerability has been detected in D-Link DI-7001 MINI 24.04.18B1
CVE-2025-15193High· 8.8A vulnerability was detected in D-Link DWR-M920 up to 1.1.50
CVE-2025-15189High· 8.8A vulnerability was identified in D-Link DWR-M920 up to 1.1.50
CVE-2025-15194Critical· 9.8A vulnerability was found in D-Link DIR-600 up to 2.15WWb02