CVE-2026-94050Medium· 4.3▾ SunlitA vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the function routerd.wificfg_get/routerd.get_rand_key of the component ubus JSON-RPC interface. Such manipulation leads to information disclosure.…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 23.7 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Sep 21.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.2%
Last analysed / modified upstream
0.2% → 0.4%
A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the function routerd.wificfg_get/routerd.get_rand_key of the component ubus JSON-RPC interface. Such manipulation leads to information disclosure. The attack must be carried out from within the local network. Upgrading to version 1.0.7.260821.161908 is able to address this issue. It is suggested to upgrade the affected component. This vulnerability only affects products that are no longer supported by the maintainer.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-94036High· 8.8A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402
CVE-2026-90881Medium· 5.3A weakness has been identified in D-Link DIR-882 up to 20260814
CVE-2026-113736Critical· 9.8D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty password
CVE-2026-113735Low· 3.7D-Link DCS-6501LH aoni_ipc mydlink_set_root_pwd weak credentials
CVE-2026-112146High· 7.4D-Link E15/M32/R15/R32 MQTT Broker passwd hard-coded credentials
CVE-2026-110536Critical· 10.0A vulnerability was determined in D-Link DIR-868L 2.01b05