CVE-2026-19893: D-Link DIR-842 vsftpd vsftpd.conf default permission

Severity: low (CVSS 3.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-15 · updated 2026-08-20
Weakness: CWE-266

Description

A vulnerability was identified in D-Link DIR-842 2.01.B04. This impacts an unknown function of the file /etc/vsftpd.conf of the component vsftpd. Such manipulation leads to incorrect default permissions. It is possible to launch the attack remotely. A high complexity level is associated with this attack. The exploitability is said to be difficult.

Affected products

D-Link DIR-842: 2.01.B04

References

https://app.notion.com/p/DIR-842-2-01-B04-38b1f5ba98908074af60fc69628dfb71?source=copy_link
https://vuldb.com/cve/CVE-2026-19893
https://vuldb.com/submit/870588
https://vuldb.com/vuln/390081
https://vuldb.com/vuln/390081/cti
https://www.dlink.com/

Get alerted when CVE-2026-19893 or the next vulnerability affects your stack