CVE-2026-94089

A vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy of the file /webfa_authentication.cgi of the component Authentication Handler. Executing a manipulation of the argument id/password can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.

• CWE-119
• CWE-121

• https://github.com/Walnut1337/CVE/blob/main/poc/poc_crash.py
• https://vuldb.com/cve/CVE-2026-94089
• https://vuldb.com/submit/951681
• https://vuldb.com/vuln/408017
• https://vuldb.com/vuln/408017/cti
• https://www.dlink.com/

Published

Sep 20, 2026

Last Modified

Sep 21, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-94057Exim before 4.100.1 allows SMTP smuggling in which the recei…4
• CVE-2026-9406A weakness has been identified in Totolink A8000RU 7.1cu.643…9.8
• CVE-2026-9407A security vulnerability has been detected in Totolink A8000…9.8
• CVE-2026-9408A vulnerability was detected in Totolink A8000RU 7.1cu.643_b…9.8
• CVE-2026-94083Suricata before 8.0.7 has a DoH2 type confusion that can cau…9.4
• CVE-2026-94084Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-f…9.4
• CVE-2026-9409A flaw has been found in Sushmi-pal Invoice-System up to a0a…4.3
• CVE-2026-94090A security flaw has been discovered in JusticeRage Manalyze …6.3
• CVE-2026-94091A weakness has been identified in piskvorky gensim up to 4.4…5.5
• CVE-2026-94092A vulnerability was detected in dmlc dgl up to 2.1.0. This i…5.5
• CVE-2026-94093A security vulnerability has been detected in DLR-RM stable-…6.3
• CVE-2026-94094A flaw has been found in OpenClaw up to 2026.9.5. Affected i…4.3