---
id: "CVE-2026-124564"
page: "https://infrastack.ai/live/CVE-2026-124564"
kind: "vulnerability"
aliases: ["CVE-2026-124564"]
title: "D-Link DIR-878 router: HNAP path traversal lets remote attackers read files"
severity: "medium"
cvss: 5.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["d-link", "dir-878", "infrastructure", "routers", "self-hosted"]
not_affected_if: ["not-dir-878", "supported-firmware"]
published_at: "2026-11-09T04:17:06+00:00"
first_seen_at: "2026-11-09T04:24:37+00:00"
updated_at: "2026-11-09T04:26:40+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124564", "first_seen_at": "2026-11-09T04:24:37+00:00"}]
exploit_sources: []
---

# D-Link DIR-878 router: HNAP path traversal lets remote attackers read files

Link for people: https://infrastack.ai/live/CVE-2026-124564 (this .md is for agents)

A path traversal flaw in the HNAP handler of the D-Link DIR-878 router (firmware 1.20B05) lets a remote attacker manipulate the ListDirectoryPath argument of the GetListDirectory function in bin/prog.cgi. The public exploit can reach files outside the intended directory on the device.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the firmware version in the router admin interface and compare it to `1.20B05`
- Confirm whether the device is still supported by D-Link; the description says this issue only affects unsupported products

## Timeline

- 2026-11-09T04:24:37+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-124564

## From the sources

A weakness has been identified in D-Link DIR-878 1.20B05. Affected by this issue is the function GetListDirectory of the file bin/prog.cgi of the component HNAP Handler. This manipulation of the argument ListDirectoryPath causes path traversal. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. This vulnerability only affects products that are no longer supported by the maintainer.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_