CVE-2026-11497

Katalog CVE

CVSS 8.8 · High EPSS 0,43%

Kerentanan Incorrect Privilege Assignment pada dlink dcs-5615 firmware. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability has been found in D-Link DCS-5615 1.01.00. Affected by this vulnerability is an unknown functionality of the file /etc/conf.d/boa/boa.conf of the component Boa Webserver. Such manipulation leads to least privilege violation. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

Rincian

Terbit di NVD

8 Juni 2026

Terakhir diubah

23 Juli 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-266: Incorrect Privilege Assignment
CWE-272: Least Privilege Violation

EPSS (30 hari)

0,43% peluang dieksploitasi; lebih tinggi dari 35,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.notion.so/D-link-DCS-5615_REV_1-01-00-3670ed14e5cb80e9be78f7d8dbf1e789?source=copy_link advisory vendor
• https://vuldb.com/cve/CVE-2026-11497 advisory pihak ketiga · vdb entry
• https://vuldb.com/submit/834823 advisory pihak ketiga · vdb entry
• https://vuldb.com/vuln/369117 advisory pihak ketiga · vdb entry
• https://vuldb.com/vuln/369117/cti permissions required · vdb entry
• https://www.dlink.com/ product