Skip to main content

Dir X1860Z

2 CVEs product

Monthly

CVE-2026-94036 Sep 20, 15:45 HIGH POC This Week

Unauthenticated attackers on the local network can bypass authentication and gain full control of D-Link DIR-X1860 and DIR-X1860Z routers (firmware up to 1.0.2.220120.165402) by manipulating the passwd_set argument in the /ubus interface of the routerd component. Publicly available exploit code exists, and the vulnerability has a CVSS 4.0 score of 7.4, though it is not confirmed as actively exploited (no KEV).

Authentication Bypass D-Link Dir X1860 Dir X1860Z
NVD VulDB
CVSS 4.0
7.4
CVE-2026-94050 Sep 20, 20:00 MEDIUM PATCH Monitor

Information disclosure in D-Link DIR-X1860Z routers running firmware up to 1.0.2.220120.165402 lets unauthenticated users on the same local network segment read sensitive data through two ubus JSON-RPC handlers, routerd.wificfg_get and routerd.get_rand_key. The bug is reachable only from the adjacent network (LAN, guest WiFi, or a compromised local device) and carries low confidentiality impact with no integrity or availability effect, and no public exploit identified at time of analysis. D-Link ships a HOTFIX firmware (1.0.7.260821.161908) that resolves the issue, but the DIR-X1860Z is an end-of-life product, so exposure is concentrated on unpatched units still in service.

Information Disclosure D-Link D-Link Dir X1860Z
NVD VulDB
CVSS 4.0
5.3
CVSS 7.4
HIGH POC This Week

Unauthenticated attackers on the local network can bypass authentication and gain full control of D-Link DIR-X1860 and DIR-X1860Z routers (firmware up to 1.0.2.220120.165402) by manipulating the passwd_set argument in the /ubus interface of the routerd component. Publicly available exploit code exists, and the vulnerability has a CVSS 4.0 score of 7.4, though it is not confirmed as actively exploited (no KEV).

Authentication Bypass D-Link Dir X1860 +1
NVD VulDB
CVSS 5.3
MEDIUM PATCH Monitor

Information disclosure in D-Link DIR-X1860Z routers running firmware up to 1.0.2.220120.165402 lets unauthenticated users on the same local network segment read sensitive data through two ubus JSON-RPC handlers, routerd.wificfg_get and routerd.get_rand_key. The bug is reachable only from the adjacent network (LAN, guest WiFi, or a compromised local device) and carries low confidentiality impact with no integrity or availability effect, and no public exploit identified at time of analysis. D-Link ships a HOTFIX firmware (1.0.7.260821.161908) that resolves the issue, but the DIR-X1860Z is an end-of-life product, so exposure is concentrated on unpatched units still in service.

Information Disclosure D-Link D-Link +1
NVD VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy