CVE-2026-94036 | D-Link DIR-X1860/DIR-X1860Z up to 1.0.2.220120.165402 routerd /ubus passwd_set access control

September 19, 2026 Yanac

A vulnerability was found in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402 and classified as critical. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwd_set results in improper access controls.

This vulnerability is cataloged as CVE-2026-94036. The attack must originate from the local network. Furthermore, there is an exploit available.VulDB Recent EntriesRead More