{"vulnerability": "cve-2026-8260", "sightings": [{"uuid": "fb9a9f98-048a-4237-887f-6fd60620a5cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8260", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116550988543376529", "content": "A new vulnerability with increased severity was disclosed for D-Link DCS-935L (CVE-2026-8260) https://vuldb.com/vuln/362557", "creation_timestamp": "2026-05-10T15:29:09.799134Z"}, {"uuid": "47ef70b0-e444-421c-a48e-dcd7448e2a4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8260", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116553352951979946", "content": "\ud83d\udd0e HIGH severity: D-Link DCS-935L (\u22641.10.01) is affected by CVE-2026-8260 \u2014 remote buffer overflow in HNAP Service via AdminPassword. Public exploit available. Urgent: segment/monitor impacted devices. https://radar.offseq.com/threat/cve-2026-8260-buffer-overflow-in-d-link-dcs-935l-917cd231 #OffSeq #DLink #Vuln #Cybersecurity", "creation_timestamp": "2026-05-11T01:30:30.020957Z"}, {"uuid": "947304cf-371a-4c25-a359-609752457f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8260", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mlk4sl6tqq22", "content": "D-Link DCS-935L v1.10.01 & earlier: HIGH severity buffer overflow (public exploit) via HNAP Service. Segment & monitor affected devices now. https://radar.offseq.com/threat/cve-2026-8260-buffer-overflow-in-d-link-dcs-935l-917cd231 #OffSeq #DLink #IoTSecurity", "creation_timestamp": "2026-05-11T01:30:30.786860Z"}, {"uuid": "f0b56a57-6457-4b17-87aa-6eb89cebb5b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8260", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlkbcp55lr2k", "content": "\ud83d\udfe0 CVE-2026-8260 - High (8.8)\n\nA vulnerability was found in D-Link DCS-935L up to 1.10.01. The impacted element is the function ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-8260/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-11T02:51:05.988003Z"}, {"uuid": "31114fb1-2a29-4837-a6f9-cb9a5ac27235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8260", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlkblw3yxj2q", "content": "CVE-2026-8260 - D-Link DCS-935L HNAP Service hnap_service SetDeviceSettings buffer overflow\nCVE ID : CVE-2026-8260\n \n Published : May 11, 2026, 2:16 a.m. | 13\u00a0minutes ago\n \n Description : A vulnerability was found in D-Link DCS-935L up to 1.10.01. The impacted element is the f...", "creation_timestamp": "2026-05-11T02:56:14.837633Z"}, {"uuid": "0fbf70a3-8706-4954-912b-a65a143bb8e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8260", "type": "seen", "source": "Telegram/kyGo_lEwfi-PgIZxotK7Gn-1w0CR8dQaK7Il-1Qmmj8rP4Q", "content": "", "creation_timestamp": "2026-05-11T11:00:10.000000Z"}, {"uuid": "9027caad-e97e-4e0d-a11a-e96c055b8c98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8260", "type": "seen", "source": "https://www.acn.gov.it/portale/w/d-link-poc-pubblico-per-lo-sfruttamento-della-cve-2026-8260", "content": "Disponibile un Proof of Concept (PoC) per la CVE-2026-8260 \u2013 gi\u00e0 sanata dal vendor \u2013 presente nel D-Link DCS-935L. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato remoto di eseguire codice arbitrario e di elevare i propri privilegi sui sistemi interessati.", "creation_timestamp": "2026-05-12T07:35:23.000000Z"}, {"uuid": "4e00db4c-536f-4301-ab58-077df6f0ddb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8260", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mlpn73epcx2p", "content": "\ud83d\udccc CVE-2026-8260 - A vulnerability was found in D-Link DCS-935L up to 1.10.01. The impacted element is the function SetDeviceSettings of the file /web/cgi-bin/hnap/hnap_... https://www.cyberhub.blog/cves/CVE-2026-8260", "creation_timestamp": "2026-05-13T06:07:07.849248Z"}]}