EXPOSURES › CVE-2026-110536
CVE-2026-110536
CRITICALD-Link DIR-868L router allows remote OS command injection via SOAPACTION parameter in HNAP CGI Handler.
An attacker can remotely execute arbitrary commands on the router by manipulating the SOAPACTION argument, enabling full system compromise. DIB organizations must ensure all network hardware is patched and monitored for known exploits, as this vulnerability is actively exploitable and could lead to lateral movement or data exfiltration.
Shame score — A critical remote code execution flaw in consumer/enterprise router hardware that is publicly disclosed and exploitable, representing a severe avoidable risk for any organization relying on D-Link networking equipment.
▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.
A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipulation of the argument SOAPACTION can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.