CVE-2023-36092

CriticalCVSS 9.8

Published: 31/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.10%

61th percentile - higher than 61% of all known CVEs

Summary

Authentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to gain escalated privileges via phpcgi_main. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Risk Assessment

The organization may be exposed to unauthorized access and privilege escalation, potentially leading to serious security breaches.

Recommendation

It is recommended to immediately decommission vulnerable devices and migrate to supported models.

Original NVD description (English source)

Authentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to gain escalated privileges via via phpcgi_main. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.