DIR-505 vulnerabilities
CVEs whose affected-version data names the DIR-505 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-120189Critical· 10.0PoCD-Link DIR-505 TFTP Upload Filename tftpd mp_upload_file stack-based overflow
A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of the file /usr/bin/tftpd of the component TFTP Upload Filename Handler. The manipulation leads to stack-based buffer ove…
▾ AbyssalD-Link · DIR-505EPSS 1.3%via CVEORG
CVE-2026-118579Critical· 9.8PoCD-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor
A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the component Web Management CGI. This manipulation of the argument accu/pass/code/hash/cmds causes backd…
▾ AbyssalD-Link · DIR-505EPSS 0.79%via CVEORG