CRITICAL
CVSS 9.9
Published: 2026-09-14
CVE-2026-90680
Software Component Vulnerability Advisory (CWE-Not-Specified)
Seeking technical exploit breakdowns or verified PoC code for CVE-2026-90680?
🔬 Search Writeups & Exploit Archive →
CyberVault Technical Summary
Analyst SynthesisSecurity vulnerability CVE-2026-90680 affecting Generic/Unknown Software Component. Evaluated with CVSS Base Score of 9.9 (CRITICAL).
Original NVD Description
Source: NIST NVD
A security flaw has been discovered in D-Link DIR-823G 1.0.2B05_20181207. The impacted element is the function strcpy of the file /HNAP1/SetStaticRouteSettings of the component HNAP1. The manipulation of the argument PAddress/SubnetMask/Gateway results in stack-based buffer overflow. The attack can be launched remotely.
📊 CVSS v3.1 Metric Breakdown
🎯 Affected Versions Matrix
| Affected Product | Generic/Unknown / Software Component |
| Affected Versions | Unspecified |
| Weakness Enumeration | CWE-Not-Specified |
🛡️ Remediation & Security Action
- Authoritative Guidance: Follow distribution-specific vendor security notices. Advisory status and package patches vary by distribution release.
- Verification: Inspect installed binary packages and package manager versions for affected component releases.
- Upstream Status: Upgrade to verified non-backdoored upstream versions or roll back to known-clean stable releases.
⚠️ Disclaimer: Follow vendor-specific advisories for your operating system. CyberVault does not fabricate unsupported remediation scripts.
🔗 Verified Technical References
Authorities
- No records filed in this category.
Distributions
- No records filed in this category.
Technical Analysis
- No records filed in this category.
Risk Snapshot
9.9
CRITICAL SEVERITY
CVE ID
CVE-2026-90680
Weakness
CWE-Not-Specified
Vendor
Generic/Unknown
Product
Software Component
Published
2026-09-14
Vector
N/A