CVE-2026-4183 - D-Link DIR-816 goahead form2WlanBasicSetup.cgi stack-based overflow

Back Back to CVE browser

CRITICAL

D-Link DIR-816 goahead form2WlanBasicSetup.cgi stack-based overflow

Published Mar 15, 2026

9.3

CRITICAL

CVSS 4.0

EPSS 1.88%

Description

A security vulnerability has been detected in D-Link DIR-816 1.10CNB05. Affected is an unknown function of the file /goform/form2WlanBasicSetup.cgi of the component goahead. Such manipulation of the argument pskValue leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

Vendor D-Link Product DIR-816 Default
n/a
- Version
  1.10CNB05
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

D-Link

DIR-816

n/a

Version	Status	Constraints
1.10CNB05	affected	-

Remediation

No remediation recorded yet.

Weaknesses (3)

CWE-119

Buffer Overflow

CWE-121

CWE-787

Out-of-bounds Write

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-12238
Advisory
https://github.com/wudipjq/my_vuln/blob/main/D-Link7/vuln_87/87.md
exploitThird Party Advisory
https://vuldb.com/?ctiid.351087
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.351087
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.769831
third-party-advisoryThird Party AdvisoryVDB Entry
https://www.dlink.com/
product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-12238		Advisory
https://github.com/wudipjq/my_vuln/blob/main/D-Link7/vuln_87/87.md		exploitThird Party Advisory
https://vuldb.com/?ctiid.351087		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.351087		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.769831		third-party-advisoryThird Party AdvisoryVDB Entry
https://www.dlink.com/		product