CVE-2026-94036

8.8 HIGH

Published 2026-09-20 · Updated 2026-09-21

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwd_set results in improper access controls. The attack must originate from the local network. The exploit has been released to the public and may be used for attacks.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-266, CWE-284

All references

https://pastebin.com/gzKNCCPV
https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10513
https://vuldb.com/cve/CVE-2026-94036
https://vuldb.com/submit/947565
https://vuldb.com/vuln/407965
https://vuldb.com/vuln/407965/cti
https://www.dlink.com/

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2025-70962PoC
CRITICALCVE-2026-10059
MEDIUMCVE-2026-12698
MEDIUMCVE-2026-14816
MEDIUMCVE-2026-14848
HIGHCVE-2026-15230
HIGHCVE-2026-16102
MEDIUMCVE-2026-16295

Related by shared AI tags and CWE weakness class. Browse the full archive.