CVE-2026-8260: D-Link DCS-935L HNAP Service hnap_service SetDeviceSettings buffer overflow
A vulnerability was found in D-Link DCS-935L up to 1.10.01. The impacted element is the function SetDeviceSettings of the file /web/cgi-bin/hnap/hnap_service of the component HNAP Service. The manipulation of the argument AdminPassword results in buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8260?
CVE-2026-8260 has a CVSS score that classifies it as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2026-8260?
To fix CVE-2026-8260, upgrade the D-Link DCS-935L to a version later than 1.10.01.
What systems are affected by CVE-2026-8260?
CVE-2026-8260 affects D-Link DCS-935L cameras running firmware versions up to and including 1.10.01.
What can attackers do with CVE-2026-8260?
Attackers can exploit CVE-2026-8260 to perform a remote buffer overflow, potentially gaining control over the device.
Is CVE-2026-8260 being actively exploited?
As of now, there have been reports of active exploitation of CVE-2026-8260 in the wild.