CVE-2026-12174
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
A vulnerability has been detected in D-Link DCS-935L version 1.10.01, affecting the snprintf function in the /web/cgi-bin/greece/rhea file of the HTTP Handler component. Manipulation of the argument data leads to format string exploitation.
Risk Assessment
The attack can be launched remotely, increasing the risk for organizations, especially since the exploit has been disclosed publicly.
Recommendation
It is recommended to update the device to the latest firmware version to mitigate the risk associated with this vulnerability.
Original NVD description (English source)
A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the file /web/cgi-bin/greece/rhea of the component HTTP Handler. Such manipulation of the argument data leads to format string. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.