CVE-2026-7554

Katalog CVE

CVSS 8.1 · High EPSS 2,6%

Kerentanan Weak Password Recovery Mechanism for Forgotten Password pada dlink m60 firmware. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability was determined in D-Link M60 up to 1.20B02. Affected by this issue is some unknown functionality of the file /usr/bin/httpd. This manipulation causes weak password recovery. The attack can be initiated remotely. A high degree of complexity is needed for the attack. The exploitation is known to be difficult. The exploit has been publicly disclosed and may be utilized.

Rincian

Terbit di NVD

1 Mei 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-640: Weak Password Recovery Mechanism for Forgotten Password

EPSS (30 hari)

2,6% peluang dieksploitasi; lebih tinggi dari 84,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.yuque.com/iam0range/rle72q/dhs1zsbgtm1ne0y1 exploit · mitigasi · advisory pihak ketiga
• https://vuldb.com/submit/805642 advisory pihak ketiga · vdb entry
• https://vuldb.com/vuln/360362 advisory pihak ketiga · vdb entry
• https://vuldb.com/vuln/360362/cti permissions required · vdb entry
• https://www.dlink.com/ product