CVE-2026-118579 D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor
CriticalCVSS 9.3
EPSS 0.79%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the component Web Management CGI. This manipulation of the argument accu/pass/code/hash/cmds causes backdoor. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| d-link dir-505 | = 1.10B02 | No fix listed |
References
- VDB-428018 | D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor technical-description vdb-entry
- VDB-428018 | CTI Indicators (IOB, IOC, TTP, IOA) permissions-required signature
- CVE-2026-118579 | CVE Analysis and Report third-party-advisory
- Submit #1025351 | D-Link DIR-505 1.10B02 Backdoor third-party-advisory
- github.com exploit
- www.dlink.com product