Live › vulnerability › CVE-2026-120189
A stack-based buffer overflow in the TFTP upload filename handler of the D-Link DIR-505 router firmware (version 1.10B02) can be triggered remotely. The sources say a public exploit exists, so an attacker may be able to run code on the device.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-01 01:47 UTC. All times on this page are UTC.
D-Link DIR-505 routers running firmware 1.10B02 are the only confirmed affected device. VulDB says the flaw is reachable remotely without authentication, so look at any such router whose TFTP service can be reached from the internet or from untrusted network clients. D-Link ended support for this model in 2018, so owners can skip it only by retiring the device.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| DIR-505 | vendor | 1.10B02 | – |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of the file /usr/bin/tftpd of the component TFTP Upload Filename Handler. The manipulation leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
This page as .md · .json · in your agent: get_signal("CVE-2026-120189")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.