9.8
CriticalCVSS 3.1 · from VulDB
CVE-2026-118579
D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor
DIR-505 · CWE-912 · CWE-912AffectedDIR-505
FixNo fix listed yet.
PublishedOct 28, 23:00 · VulDB
ScoredOct 28 · 9.8 · VulDB
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:08 UTC
What we know
No known exploitation. CISA KEV, checked 22:08 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
An attacker only needs network access to the target. No login needed. CVSS: network, no privileges.
A successful attack can read and change data and take the service down. CVSS: high impact on confidentiality, integrity and availability.
A successful attack gives full control of the affected system. CISA: technical impact total.
Description
A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the component Web Management CGI. This manipulation of the argument accu/pass/code/hash/cmds causes backdoor. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
From VulDB
Affected and fixed versions
ProductAffectedFixed inDIR-5051.10B02–
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known