CVE-2026-82680 PUBLISHED

A weakness has been identified in D-Link DSM-G600 1.01. This affects an unknown function of the file /load_file.cgi of the component Multipart Handler. Executing a manipulation can lead to out-of-bounds write. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.

• ST4R0001 (VulDB User) reporter

• VDB-397175 | D-Link DSM-G600 Multipart load_file.cgi out-of-bounds write
• VDB-397175 | CTI Indicators (IOB, IOC, IOA)
• CVE-2026-82680 | CVE Analysis and Report
• Submit #894188 | D-Link DSM-G600 REVA 1.01 Buffer Overflow / Out-of-bounds Write candidate
• https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/DLINK-BOF-001-vulndb.md
• https://www.dlink.com/

• Out-of-bounds Write CWE
• Memory Corruption CWE