Classification: Severe, Solution: Official Fix, Exploit Maturity: Functional, CVSSv3.1: 7.4, CVEs: CVE-2026-112146, Summary: A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /etc/emDaemon/passwd of the component MQTT Broker. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. The exploit is now public and may be used.
Disponibile un Proof of Concept (PoC) per lo sfruttamento della CVE-2026-110536, presente in dispositivi DIR-868L non più supportati. Tale vulnerabilità potrebbe consentire a un utente malintenzionato remoto non autenticato di eseguire codice arbitrario sui sistemi interessati.
Disponibile Proof of Concept (PoC) per lo sfruttamento di una vulnerabilità presente nei dispositivi D-Link DAP-1360 non più supportati. Tale vulnerabilità potrebbe consentire ad un utente malintenzionato remoto non autenticato di eseguire codice arbitrario sui sistemi interessati.
D-Link warned customers of a maximum-severity vulnerability (CVE-2026-86296) with public proof-of-concept (PoC) exploit code and no patch, affecting legacy DIR-822A dual-band Wi-Fi routers. [...]
Classification: Severe, Solution: Temporary Fix, Exploit Maturity: Functional, CVSSv4.0: 9.4, CVEs: CVE-2026-93958, CVE-2026-94036, Summary: Security vulnerabilities affecting multiple D-Link router models can result in administrative compromise or command execution, and public exploit material is available. CVE-2026-93958 affects the D-Link R95 and allows OS command injection through the DHMAPI interface. The attack can be performed remotely and can result in execution of arbitrary commands on…