CVE-2026-118579
D-Link DIR-505
- D-Link DIR-505
- Critical
- CVSS 9.3
- No fixed version listed
Summary
A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the component Web Management CGI. This manipulation of the argument accu/pass/code/hash/cmds causes backdoor. The attack is possible to be carried out remotely.
From the CVE record.
Read the original description
CVE record
A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the component Web Management CGI. This manipulation of the argument accu/pass/code/hash/cmds causes backdoor. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
What to do
No fixed version listed
Affected products
| Product | Affected | Fixed in |
|---|---|---|
| D-Link DIR-505 | 1.10B02 | None listed |
Advisories and fixes
- Public exploit github.com
Scores and signals
- Exploitation
- No known exploitation
- Severity
- Critical, CVSS 9.3 (v4.0, scored by VulDB)
- Weakness
- CWE-912: Backdoor
- Vendor
- D-Link, DIR-505
Timeline
- First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.