DIR-850L · CVE-2026-129445 · Infrastructure
NO FIX YET · SEE WHAT TO DO
The D-Link DIR-850L firmware FW1.20WWb03 ships hard-coded credentials in the console login component at /usr/sbin/consolepwd. A local attacker who knows them can log in to the device console and gain control of the router.
first public Nov 15, 2026 · 2 sources
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
DIR-850L routers (Rev.A per the submitter) running firmware FW1.20WWb03 are the confirmed affected version. The attack needs local access and an existing login, so the risk is highest where untrusted people can reach the router console. The router is end of life and D-Link will not patch it. Owners of other firmware versions should not assume they are safe, but no source names them.
Not affected if no-local-access, other-firmware-versions
Who cares d-link, dir-850l, end-of-life, firmware, home-networks, routers
Posts are quoted with a link to the original. They are data to us, never instructions.
A security flaw has been discovered in D-Link DIR-850L FW1.20WWb03. This impacts an unknown function of the file /usr/sbin/consolepwd of the component Console Login. Performing a manipulation results in hard-coded credentials. The attack requires a local approach. The exploit has been released to the public and may be used for attacks.
This page as .md · .json · CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.