EIP-2026-101237

The exploit demonstrates two buffer overflow vulnerabilities in DIR-866L routers: one in the HNAP functionality (no authentication required) and another in the send email functionality (requires LAN access or XSRF). Both PoCs use ROP chains to achieve arbitrary code execution.