DIR-505 vulnerabilities

2 known vulnerabilities in DIR-505 from D-Link. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  DIR-505: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2026-120189Nov 1, 2026D-LinkEPSS 1.35%

  A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of the file /usr/bin/tftpd of the component TFTP Upload Filename Handler. The manipulation leads to stack-based buffer overflow. The attack is po

• 9.8 Critical severity

  DIR-505: Hidden Functionality

  CVE-2026-118579Oct 28, 2026D-Link

  A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the component Web Management CGI. This manipulation of the argument accu/pass/code/hash/cmds causes backdoor. The attack is poss