CVE-2026-19893

LOW 3.1

D-Link DIR-842 vsftpd vsftpd.conf default permission

CVSS Score

3.1

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was identified in D-Link DIR-842 2.01.B04. This impacts an unknown function of the file /etc/vsftpd.conf of the component vsftpd. Such manipulation leads to incorrect default permissions. It is possible to launch the attack remotely. A high complexity level is associated with this attack. The exploitability is said to be difficult.

CWE	CWE-276 CWE-266
Vendor	d-link
Product	dir-842
Published	Aug 15, 2026

Stay Ahead of the Next One

Get instant alerts for d-link dir-842

Be the first to know when new low vulnerabilities affecting d-link dir-842 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:X/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

D-Link / DIR-842

2.01.B04

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/390081 vuldb.com: https://vuldb.com/vuln/390081/cti vuldb.com: https://vuldb.com/cve/CVE-2026-19893 vuldb.com: https://vuldb.com/submit/870588 app.notion.com: https://app.notion.com/p/DIR-842-2-01-B04-38b1f5ba98908074af60fc69628dfb71?source=copy_link dlink.com: https://www.dlink.com/

Credits

🔍 L14Utopia (VulDB User)