Live › vulnerability › CVE-2026-118579
Go to dashboardA weakness in the main function of the /secmark1524.cgi web management script on the D-Link DIR-505 (firmware 1.10B02) lets an attacker manipulate the accu/pass/code/hash/cmds argument and create a backdoor. An attacker who can reach the router's web interface over the network can gain control of the device, and a public exploit is available.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 23:35 UTC. All times on this page are UTC.
Any network that runs a D-Link DIR-505 on firmware 1.10B02 with the web management interface reachable is exposed. Devices behind a firewall that blocks the admin interface from untrusted networks carry less risk. Teams that do not run this model can skip it.
No product ranges from the sources yet.
1.10B02 as affected./secmark1524.cgi request in web server or access logs, if logs are kept.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the component Web Management CGI. This manipulation of the argument accu/pass/code/hash/cmds causes backdoor. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
This page as .md · .json · in your agent: get_signal("CVE-2026-118579")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.