CVE-2026-118579
A weakness has been identified in D-Link DIR-505 1.10B02
- Risk score
- 64/100
- CVSS
- 9.8 v3.1
- Published
- 28 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A weakness in the D-Link DIR-505 1.10B02's Web Management CGI allows remote attackers to cause a backdoor. This could be exploited using publicly available code.
- Affected
- {'products': ['D-Link DIR-505'], 'packages': [], 'versions': ['1.10B02']}
- Fix
- Check the linked advisory for details on a fix, as none are provided here.
- Exploitation
- Public proof of concept
Why it is Amber
- CVSS 9.8 critical
- Remotely exploitable without logging in
References
Original description
A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the component Web Management CGI. This manipulation of the argument accu/pass/code/hash/cmds causes backdoor. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
Last activity 28 Oct 2026. Patch Forecast updates every hour.