high8.8
CVE-2026-94036
A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402.
Impact
A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwd_set results in improper access controls. The attack must originate from the local network. The exploit has been released to the public and may be used for attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| D-Link | D-Link DIR-X1860 And DIR-X1860Z | before 1.0.2.220120.165402. |
Versions were read from the advisory text. No structured product data has been published for this record yet.