CVE-2026-90881

Description

A weakness has been identified in D-Link DIR-882 up to 20260814. Impacted is the function main of the file /HNAP1/dllog.cgi of the component CGI Binary. Executing a manipulation can lead to information disclosure. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.

CVSS Vector

References

• https://github.com/limou89/somevul/blob/main/D-Link_DIR-882_A1_dllog_dlquickvpnsettings_Information_Disclosure.md
• https://vuldb.com/cve/CVE-2026-90881
• https://vuldb.com/submit/929152
• https://vuldb.com/vuln/403475
• https://vuldb.com/vuln/403475/cti
• https://www.dlink.com/