p PatchFirst

CVE-2026-118579

CVE-2026-118579 · D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the component Web Management CGI. This manipulation of the argument accu/pass/code/hash/cmds causes backdoor. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.

CVSS 9.3 · Critical · EPSS 0.8%

Published
Updated

Affected products and versions

  • dir-505

    Versions
    • 1.10B02: Affected

    No fix published

Original sources

Check your server →