EIP-2026-101239

PRE-CVE

D-Link DIR-890L/R - Multiple Buffer Overflow Vulnerabilities

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-101239. PoCs published by Samuel Huntley.

AI-analyzed exploit summary The exploit demonstrates two buffer overflow vulnerabilities in DIR-890L/R routers, one in the authentication functionality and another in HNAP. The PoC includes crafted HTTP requests with overflow payloads designed to bypass ASLR and execute arbitrary commands (e.g., starting a telnet daemon).

Description

D-Link DIR-890L/R - Multiple Buffer Overflow Vulnerabilities

Exploits (1)

exploitdb WORKING POC
by Samuel Huntley · textremotehardware
https://www.exploit-db.com/exploits/38716

The exploit demonstrates two buffer overflow vulnerabilities in DIR-890L/R routers, one in the authentication functionality and another in HNAP. The PoC includes crafted HTTP requests with overflow payloads designed to bypass ASLR and execute arbitrary commands (e.g., starting a telnet daemon).

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Racy
Target: D-Link DIR-890L/R firmware (version unspecified)
No auth needed
Prerequisites: Network access to the router's management interface · Repeated exploitation attempts to bypass ASLR
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026