CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-11-01
D-Link DIR-505 Router TFTP File Upload Stack-Based Buffer Overflow (CVE-2026-120189) Technical Analysis and Mitigation Guide
[Affected Scope] D-Link DIR-505 firmware version 1.10B02 and prior
[Impact] Unauthenticated remote attackers can execute arbitrary system commands or gain full control of the device by sending crafted filenames via TFTP
[Mitigation] Disable the vulnerable TFTP service immediately, restrict access via firewall rules, and upgrade to a patched firmware or replace the legacy device