EUVD-2026-83752
GHSA-35x4-pwx2-h4wj
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Adjacent network only (AV:A) per 'must originate from the local network'; unauthenticated low-complexity access-control bypass on passwd_set grants full device control, so C/I/A:H.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
3DescriptionCVE.org
A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwd_set results in improper access controls. The attack must originate from the local network. The exploit has been released to the public and may be used for attacks.
AnalysisAI
Unauthenticated attackers on the local network can bypass authentication and gain full control of D-Link DIR-X1860 and DIR-X1860Z routers (firmware up to 1.0.2.220120.165402) by manipulating the passwd_set argument in the /ubus interface of the routerd component. Publicly available exploit code exists, and the vulnerability has a CVSS 4.0 score of 7.4, though it is not confirmed as actively exploited (no KEV).
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attacker must be positioned on the router's local/adjacent network (wired LAN or WiFi) - the flaw is not reachable from the WAN/internet by default (AV:A). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuine but access-gated router flaw. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the latest firmware update provided by D-Link as per security advisory SAP10513 (https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10513); patched firmware is available per the vendor advisory, though the exact fix version is not specified in the provided data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all D-Link DIR-X1860 and DIR-X1860Z devices and identify any running firmware up to 1.0.2.220120.165402; isolate them on dedicated VLANs or restrict local-network access to the /ubus management interface, disable remote administration and unnecessary services, and monitor for unauthorized passwd_set changes. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today