CVE-2026-4183
A security vulnerability has been detected in D-Link DIR-816 1.10CNB05. Affected is an unknown function of the file /goform/form2WlanBasicSetup.cgi of the component goahead. Such manipulation of the argument pskValue leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 10
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
- EPSS probability
- 1.18%
- CWE
- CWE-121, CWE-119
- Published
- 2026-03-15
- Last modified
- 2026-03-16
Affected products
- D-Link DIR-816
Weakness type
Related vulnerabilities
- CVE-2026-85384 — Authenticated Stack-Based Buffer Overflow in RE210 AC750 Configuration Import
- CVE-2026-83990 — Microsoft Graphics Component Elevation of Privilege Vulnerability
- CVE-2026-81953 — Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-81388 — Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-81396 — Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-73006 — DirectWrite Remote Code Execution Vulnerability
- CVE-2026-69614 — Microsoft Office Access Remote Code Execution Vulnerability
- CVE-2026-69510 — Windows DHCP Server Remote Code Execution Vulnerability