SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-90880

HIGH · CVSS 7.4 EPSS 1.04% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-15 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A command injection vulnerability exists in the Diagnostics component of D-Link DSL-3782 routers, specifically in the /cgi-bin/New_GUI/Set/Diagnostics.asp file, allowing attackers to manipulate the Addr argument. This flaw can be exploited remotely, potentially compromising the device and the network it connects to. Organizations using affected D-Link routers should prioritize patching this vulnerability to mitigate the risk of unauthorized access and control.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-90880
Severity
HIGH
CVSS
7.4
EPSS
1.04%

Original NVD Description

A security flaw has been discovered in D-Link DSL-3782 2016-07-28. This issue affects the function system of the file /cgi-bin/New_GUI/Set/Diagnostics.asp of the component Diagnostics. Performing a manipulation of the argument Addr results in command injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.