CVE-2026-4181 - D-Link DIR-816 goahead form2RepeaterStep2.cgi stack-based overflow

Back Back to CVE browser

CRITICAL

D-Link DIR-816 goahead form2RepeaterStep2.cgi stack-based overflow

Published Mar 15, 2026

9.3

CRITICAL

CVSS 4.0

EPSS 1.88%

Description

A security flaw has been discovered in D-Link DIR-816 1.10CNB05. This affects an unknown function of the file /goform/form2RepeaterStep2.cgi of the component goahead. The manipulation of the argument key1/key2/key3/key4/pskValue results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

Vendor D-Link Product DIR-816 Default
n/a
- Version
  1.10CNB05
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

D-Link

DIR-816

n/a

Version	Status	Constraints
1.10CNB05	affected	-

Remediation

No remediation recorded yet.

Weaknesses (3)

CWE-119

Buffer Overflow

CWE-121

CWE-787

Out-of-bounds Write

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-12233
Advisory
https://github.com/wudipjq/my_vuln/blob/main/D-Link7/vuln_85/85.md
exploitThird Party Advisory
https://vuldb.com/?ctiid.351085
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.351085
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.769829
third-party-advisoryThird Party AdvisoryVDB Entry
https://www.dlink.com/
product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-12233		Advisory
https://github.com/wudipjq/my_vuln/blob/main/D-Link7/vuln_85/85.md		exploitThird Party Advisory
https://vuldb.com/?ctiid.351085		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.351085		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.769829		third-party-advisoryThird Party AdvisoryVDB Entry
https://www.dlink.com/		product