CVE-2026-94036

EUVD-2026-83752
A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwd_set results in improper access controls. The attack must originate from the local network. The exploit has been released to the public and may be used for attacks.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
ADJACENT_NETWORK
LOW
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Common Weakness Enumeration
References
https://pastebin.com/gzKNCCPV
https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10513
https://vuldb.com/cve/CVE-2026-94036
https://vuldb.com/submit/947565
https://vuldb.com/vuln/407965
https://vuldb.com/vuln/407965/cti
https://www.dlink.com/