CVE-2026-94036D-Link DIR-X1860/DIR-X1860Z routerd ubus access control

Açıklama

A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwd_set results in improper access controls. The attack must originate from the local network. The exploit has been released to the public and may be used for attacks.

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Kaynaklar ve yamalar

• VDB-407965 | D-Link DIR-X1860/DIR-X1860Z routerd ubus access control vdb-entrytechnical-description
• VDB-407965 | CTI Indicators (IOB, IOC, TTP, IOA) signaturepermissions-required
• CVE-2026-94036 | CVE Analysis and Report third-party-advisory
• Submit #947565 | D-Link DIR-X1860Z 1.0.2.220120.165402 Improper Access Controls third-party-advisory
• https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10513 related
• https://pastebin.com/gzKNCCPV broken-linkexploit
• https://www.dlink.com/ product