CVE-2023-36091

CriticalCVSS 9.8

Published: 31/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.98%

57th percentile - higher than 57% of all known CVEs

Summary

Authentication Bypass vulnerability in D-Link DIR-895 FW102b07 allows remote attackers to gain escalated privileges via function phpcgi_main in cgibin. This vulnerability only affects products that are no longer supported by the maintainer.

Risk Assessment

Organizations using these devices are at risk of unauthorized access and potential attacks, which could lead to serious security consequences.

Recommendation

It is recommended to immediately decommission vulnerable devices and migrate to supported models to minimize risk.

Original NVD description (English source)

Authentication Bypass vulnerability in D-Link DIR-895 FW102b07 allows remote attackers to gain escalated privileges via via function phpcgi_main in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.