CVE-2026-94050 | D-Link DIR-X1860Z up to 1.0.2.220120.165402 ubus JSON-RPC interface routerd.wificfg_get/routerd.get_rand_key information disclosure (SAP10513)

September 19, 2026 Yanac

A vulnerability was found in D-Link DIR-X1860Z up to 1.0.2.220120.165402 and classified as problematic. Affected is the function routerd.wificfg_get/routerd.get_rand_key of the component ubus JSON-RPC interface. Such manipulation leads to information disclosure. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is listed as CVE-2026-94050. The attack must be carried out from within the local network. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More