CVE-2026-94036
HIGH
NVD
CVSS Score
8.8
Severity
HIGH
Published
Sep 20, 2026
Vendor
unknown
Description
A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwd_set results in improper access controls. The attack must originate from the local network. The exploit has been released to the public and may be used for attacks.