CVE-2026-120189 — Public exploit disclosed for D-Link DIR-505 TFTP stack buffer overflow

46/100

CVE-2026-120189 affects D-Link DIR-505 1.10B02 in the save_upload_file/mp_upload_file functions of /usr/bin/tftpd's TFTP Upload Filename Handler. A remote stack-based buffer overflow and public exploit are reported; restrict access to the affected service and check the supplier advisory for remediation and fixed versions.

Digest of 2026-11-01

Sources