CVE-2026-3485

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A flaw has been found in D-Link DIR-868L 110b03. This affects the function sub_1BF84 of the component SSDP Service. This manipulation of the argument ST causes os command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77CWE-78

Affected software

No affected versions have been published.

Timeline

Published
Mar 3, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-348505.9Race condition vulnerability in the notification service. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-348517.5Race condition vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect availabilityCVE-2026-348526.5Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-348537.5Permission bypass vulnerability in the LBS module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-348547.1UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.CVE-2026-348555.7Out-of-bounds write vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and cCVE-2026-348567.5UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-348575.5UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-348584.1UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-348597.1UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.CVE-2026-34867.2A vulnerability has been found in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /admin/stuCVE-2026-348606.5Access control vulnerability in the memo module. Impact: Successful exploitation of this vulnerability will affect availability and confiden
CVE-2026-3485: Critical severity, CVSS 9.8 | Vulnix