CVE-2026-52533

CriticalCVSS 9.8

Published: 13/07/2026(UTC)Updated: 15/07/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.41%

34th percentile - higher than 34% of all known CVEs

Summary

A vulnerability in D-Link DIR-1253 version 1.0.1.250923.142435 allows privilege escalation via the etc/shadow file. An attacker can exploit this flaw to gain unauthorized access to user accounts.

Risk Assessment

The risk involves potential takeover of the device by an attacker, leading to breach of confidentiality and integrity of data on the local network.

Recommendation

Immediately update the firmware of the D-Link DIR-1253 to the latest available version and restrict administrative interface access to trusted IP addresses only.

Original NVD description (English source)

An issue in D-Link DIR-1253 v.1.0.1.250923.142435 allows an attacker to escalate privileges via the etc/shadow component file