Search
Find a vulnerability
Search criteria
2 vulnerabilities found for DIR-505 by D-Link
CVE-2026-118579 (GCVE-0-2026-118579)
Vulnerability from nvd – Published: 2026-10-28 23:00 – Updated: 2026-10-29 17:20
VLAI
EPSS
VEX
Title
D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor
Summary
A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the component Web Management CGI. This manipulation of the argument accu/pass/code/hash/cmds causes backdoor. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
Severity
9.8 (Critical)
9.8 (Critical)
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-29 15:50 UTC
CWE
- CWE-912 - Backdoor
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/428018 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/428018/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-118579 | third-party-advisory |
| https://vuldb.com/submit/1025351 | third-party-advisory |
| https://github.com/Walnut1337/DIR-505_backdoor/tr… | exploit |
| https://www.dlink.com/ | product |
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-118579",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-29T15:50:23.842586Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-29T17:20:48.522Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:h:d-link:dir-505:*:*:*:*:*:*:*:*"
],
"modules": [
"Web Management CGI"
],
"product": "DIR-505",
"vendor": "D-Link",
"versions": [
{
"status": "affected",
"version": "1.10B02"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Walnut1337 (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the component Web Management CGI. This manipulation of the argument accu/pass/code/hash/cmds causes backdoor. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 10,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-912",
"description": "Backdoor",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-28T23:00:15.627Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-428018 | D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/428018"
},
{
"name": "VDB-428018 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/428018/cti"
},
{
"name": "CVE-2026-118579 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-118579"
},
{
"name": "Submit #1025351 | D-Link DIR-505 1.10B02 Backdoor",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1025351"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/Walnut1337/DIR-505_backdoor/tree/main/poc"
},
{
"tags": [
"product"
],
"url": "https://www.dlink.com/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-28T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-28T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-28T17:01:47.000Z",
"value": "VulDB entry last update"
}
],
"title": "D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-118579",
"datePublished": "2026-10-28T23:00:15.627Z",
"dateReserved": "2026-10-28T15:56:24.228Z",
"dateUpdated": "2026-10-29T17:20:48.522Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-118579 (GCVE-0-2026-118579)
Vulnerability from cvelistv5 – Published: 2026-10-28 23:00 – Updated: 2026-10-29 17:20
VLAI
EPSS
VEX
Title
D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor
Summary
A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the component Web Management CGI. This manipulation of the argument accu/pass/code/hash/cmds causes backdoor. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
Severity
9.8 (Critical)
9.8 (Critical)
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-29 15:50 UTC
CWE
- CWE-912 - Backdoor
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/428018 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/428018/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-118579 | third-party-advisory |
| https://vuldb.com/submit/1025351 | third-party-advisory |
| https://github.com/Walnut1337/DIR-505_backdoor/tr… | exploit |
| https://www.dlink.com/ | product |
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-118579",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-29T15:50:23.842586Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-29T17:20:48.522Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:h:d-link:dir-505:*:*:*:*:*:*:*:*"
],
"modules": [
"Web Management CGI"
],
"product": "DIR-505",
"vendor": "D-Link",
"versions": [
{
"status": "affected",
"version": "1.10B02"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Walnut1337 (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the component Web Management CGI. This manipulation of the argument accu/pass/code/hash/cmds causes backdoor. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 10,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-912",
"description": "Backdoor",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-28T23:00:15.627Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-428018 | D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/428018"
},
{
"name": "VDB-428018 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/428018/cti"
},
{
"name": "CVE-2026-118579 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-118579"
},
{
"name": "Submit #1025351 | D-Link DIR-505 1.10B02 Backdoor",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1025351"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/Walnut1337/DIR-505_backdoor/tree/main/poc"
},
{
"tags": [
"product"
],
"url": "https://www.dlink.com/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-28T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-28T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-28T17:01:47.000Z",
"value": "VulDB entry last update"
}
],
"title": "D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-118579",
"datePublished": "2026-10-28T23:00:15.627Z",
"dateReserved": "2026-10-28T15:56:24.228Z",
"dateUpdated": "2026-10-29T17:20:48.522Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}