CVE-2019-17663: D-Link Dir-866l Firmware

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

D-Link DIR-866L 1.03B04 devices allow XSS via HtmlResponseMessage in the device common gateway interface, leading to common injection.

Affected products

• D-Link Dir-866l Firmware: version 1.03b04 only

Published 2019-10-16. Last modified 2026-06-17.