Public DIR-868L code moves an unauthenticated LAN request from stack overflow to attacker-selected program-counter control.

There is no patch, but stable code execution on stock physical hardware remains unproven.

Sources

SecondaryCVE-2026-94089: unauthenticated D-Link DIR-868L authentication-handler overflow

Copy link

Share this finding

Email Hacker News Reddit Mastodon Bluesky X LinkedIn Facebook Copy link

Read the full daily brief →

Every finding here carries a source that was checked before it published. If something is wrong, write to admin@fullchain.sh — corrections are published on the day they affect.

Monday, September 21, 2026