CVE-2026-7554

5.6 MEDIUM
Published: May 01, 2026 Modified: May 06, 2026
View on NVD

Description

A vulnerability was determined in D-Link M60 up to 1.20B02. Affected by this issue is some unknown functionality of the file /usr/bin/httpd. This manipulation causes weak password recovery. The attack can be initiated remotely. A high degree of complexity is needed for the attack. The exploitation is known to be difficult. The exploit has been publicly disclosed and may be utilized.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0
Vector String
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
https://vuldb.com/submit/805642
Source: cna@vuldb.com
Third Party Advisory VDB Entry
https://vuldb.com/vuln/360362
Source: cna@vuldb.com
Third Party Advisory VDB Entry
https://vuldb.com/vuln/360362/cti
Source: cna@vuldb.com
Permissions Required VDB Entry
https://www.dlink.com/
Source: cna@vuldb.com
Product
https://www.yuque.com/iam0range/rle72q/dhs1zsbgtm1ne0y1
Source: cna@vuldb.com
Exploit Mitigation Third Party Advisory

5 reference(s) from NVD

Quick Stats

CVSS v3 Score
5.6 / 10.0
EPSS (Exploit Probability)
1.1%
61th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

Affected Vendors

dlink