CVE-2026-4180

Katalog CVE

CVSS 9.8 · Critical EPSS 3,1%

Kerentanan Incorrect Privilege Assignment pada dlink dir-816 firmware. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

A vulnerability was identified in D-Link DIR-816 1.10CNB05. The impacted element is an unknown function of the file redirect.asp of the component goahead. The manipulation of the argument token_id leads to improper access controls. The attack may be initiated remotely. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.

Rincian

Terbit di NVD

16 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-266: Incorrect Privilege Assignment
CWE-284: Improper Access Control

EPSS (30 hari)

3,1% peluang dieksploitasi; lebih tinggi dari 87,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/wudipjq/my_vuln/blob/main/D-Link7/vuln_84/84.md exploit · advisory pihak ketiga
• https://vuldb.com/?id.351084 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.769828 advisory pihak ketiga · vdb entry
• https://vuldb.com/?ctiid.351084 permissions required · vdb entry
• https://www.dlink.com/ product