CVE advisoryCRITICAL
CVE-2026-120189
D-Link DIR-505 TFTP Upload Stack Buffer Overflow
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in D-Link DIR-505 devices allows remote attackers to exploit a stack-based buffer overflow in the TFTP upload handler, potentially leading to arbitrary code execution. Publicly available exploit code increases the risk of misuse, impacting device integrity and availability.