Vulnerability · Published Aug 15, 2026 · Assigned by VulDB

CVE-2026-19893D-Link DIR-842 vsftpd vsftpd.conf default permission

Low 3.1

In plain English

A low-severity incorrect default permissions in DIR-842 from D-Link. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities).

Severity (CVSS 3.1)3.1Low

Exploit odds (30 days)0.5%top 58.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability was identified in D-Link DIR-842 2.01.B04. This impacts an unknown function of the file /etc/vsftpd.conf of the component vsftpd. Such manipulation leads to incorrect default permissions. It is possible to launch the attack remotely. A high complexity level is associated with this attack. The exploitability is said to be difficult.

Affected products (as reported)

Vendor	Product	Versions
D-Link	DIR-842	2.01.B04

Weakness: CWE-276, CWE-266 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:X/RL:X/RC:R

References

VDB-390081 | D-Link DIR-842 vsftpd vsftpd.conf default permission vdb-entry
VDB-390081 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
CVE-2026-19893 | CVE Analysis and Report third-party-advisory
Submit #870588 | D-Link DIR-842 DIR-842 2.01.B04 Misconfiguration third-party-advisory
https://app.notion.com/p/DIR-842-2-01-B04-38b1f5ba98908074af60fc69628dfb71?source=copy_link related
https://www.dlink.com/ product