CVE-2026-90881

5.5 mediumEPSS 0.8%

Medium (5.5). EPSS 0.8% chance of exploitation in the next 30 days.

A weakness has been identified in D-Link DIR-882 up to 20260814. Impacted is the function main of the file /HNAP1/dllog.cgi of the component CGI Binary. Executing a manipulation can lead to information disclosure. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.

Severity

CVSS 4.0

5.5 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWEs: CWE-200, CWE-284
Published: 2026-09-15
Modified: 2026-09-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/limou89/somevul/blob/main/D-Link_DIR-882_A1_dllog_dlquickvpnsettings_Information_Disclosure.md
https://vuldb.com/cve/CVE-2026-90881
https://vuldb.com/submit/929152
https://vuldb.com/vuln/403475
https://vuldb.com/vuln/403475/cti

Check your stack JSON