Dir X1860

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-94036 Sep 20, 15:45 HIGH POC This Week

Unauthenticated attackers on the local network can bypass authentication and gain full control of D-Link DIR-X1860 and DIR-X1860Z routers (firmware up to 1.0.2.220120.165402) by manipulating the passwd_set argument in the /ubus interface of the routerd component. Publicly available exploit code exists, and the vulnerability has a CVSS 4.0 score of 7.4, though it is not confirmed as actively exploited (no KEV).

Authentication Bypass D-Link Dir X1860 Dir X1860Z

NVD VulDB

CVSS 4.0

7.4

CVE-2026-94036

CVSS 7.4

HIGH POC This Week

Unauthenticated attackers on the local network can bypass authentication and gain full control of D-Link DIR-X1860 and DIR-X1860Z routers (firmware up to 1.0.2.220120.165402) by manipulating the passwd_set argument in the /ubus interface of the routerd component. Publicly available exploit code exists, and the vulnerability has a CVSS 4.0 score of 7.4, though it is not confirmed as actively exploited (no KEV).

Authentication Bypass D-Link Dir X1860 +1

NVD VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy