CVE-2026-94036
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
A security flaw was discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402 in an unknown function of /ubus in the routerd component. Manipulation of the passwd_set argument results in improper access controls, and the attack must originate from the local network. The exploit has been released to the public and may be used for attacks.
Risk Assessment
An attacker on the local network could change the password or gain unauthorized access to router settings, potentially leading to compromise of the device and network traffic. Public availability of the exploit increases the risk of exploitation.
Recommendation
Update the D-Link DIR-X1860 and DIR-X1860Z firmware to the latest version and restrict access to the /ubus interface from the local network to trusted devices.
Other vulnerabilities in D-Link DIR-X1860
See all- CVE-2021-41445Medium
A reflected cross-site scripting (XSS) vulnerability exists in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta. A remote unauthenticated attacker can execute code on the victim's device by sending a crafted URL to the victim.
- CVE-2021-41442High
An HTTP smuggling vulnerability in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to perform a DoS attack by sending a specially crafted HTTP packet.
- CVE-2021-41441High
A DoS vulnerability in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to reboot the router by sending a specially crafted URL to an authenticated victim. The victim must visit this URL for the router to reboot.
Original NVD description (English source)
A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwd_set results in improper access controls. The attack must originate from the local network. The exploit has been released to the public and may be used for attacks.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS