CVE-2026-129354

CVSS 10.0 (critical) · published 2026-11-15

A flaw has been found in D-Link DIR-600L 2.17b02. Affected by this issue is the function hnap_main of the file htdocs/cgibin of the component HNAP Handler. Executing a manipulation can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been published and may be used.

Weakness: CWE-119, CWE-121

Source: NVD CVE-2026-129354

References

• https://github.com/ruanyi101/router-firmware-security-advisories/blob/main/router-firmware-GitHub-advisories/advisories/D-Link-DIR-600L-HNAP-SOAPAction.md
• https://vuldb.com/cve/CVE-2026-129354
• https://vuldb.com/submit/1043526
• https://vuldb.com/vuln/437417
• https://vuldb.com/vuln/437417/cti
• https://www.dlink.com/

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.