CVE-2026-113735Low· 3.7▾ SunlitA vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlink_set_root_pwd of the file /mnt/mtd/aoni_ipc. Executing a manipulation can lead to use of weak credentials. The attack may …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 20.4 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlink_set_root_pwd of the file /mnt/mtd/aoni_ipc. Executing a manipulation can lead to use of weak credentials. The attack may be launched remotely. The attack requires a high level of complexity. The exploitation appears to be difficult. The exploit has been publicly disclosed and may be utilized.
DCS-6501LH 3.03.02Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-113736Critical· 9.8D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty password
CVE-2026-112146High· 7.4D-Link E15/M32/R15/R32 MQTT Broker passwd hard-coded credentials
CVE-2026-110536Critical· 10.0A vulnerability was determined in D-Link DIR-868L 2.01b05
CVE-2026-108971Critical· 9.6A flaw has been found in D-Link DCS-930L B1.08B4
CVE-2026-101081Critical· 9.1A security flaw has been discovered in D-Link DI-8400 16.07
CVE-2026-100740Critical· 9.9A vulnerability was detected in D-Link DIR-895L A1_102b07