CVE-2026-95675

CVE-2026-95675 — D-Link DAP-1360 RevB formSystemCheck 处理程序中存在未认证远程 root 命令执行漏洞（CWE-78 — 操作系统命令注入），可通过硬编码认证后门访问。已在 DAP-1360 RevB，固件 2.14B05 上验证。 根本原因 两个独立问题串联： 1. 硬编码认证绕过路径。 在 main（httpd @ 0x4064c8）中： strcasecmprequestpath, "dEfWzDLOgIn" ; token @ 0x48046c ... sw 1, 8sploginslot ; mark this...

CVE-2026-95675

D-Link DAP-1360 firmware version 6.14 and earlier contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted requests to the device's web management interface without valid credentials. Attackers can fully...

EUVD-2026-84394

D-Link DAP-1360 firmware version 6.14 and earlier contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted requests to the device's web management interface without valid credentials. Attackers can fully...

CVE-2026-95675

D-Link DAP-1360 firmware 6.14 and earlier is affected by an unauthenticated remote code execution vulnerability in the device's web management interface . Remote attackers can send crafted requests without valid credentials to execute arbitrary commands as root , enabling full device compromise, ...

CVE-2026-95675 D-Link DAP-1360 6.14 Unauthenticated RCE via Web Management Interface

D-Link DAP-1360 firmware version 6.14 and earlier contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted requests to the device's web management interface without valid credentials. Attackers can fully...

CVE-2026-95675 D-Link DAP-1360 6.14 Unauthenticated RCE via Web Management Interface

D-Link DAP-1360 firmware version 6.14 and earlier contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted requests to the device's web management interface without valid credentials. Attackers can fully...

CVE-2026-95675: Improper Neutralization of Special Elements used in an OS Command

D-Link DAP-1360 firmware version 6.14 and earlier contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted requests to the device's web management interface without valid credentials. Attackers can fully...

EUVD-2014-1098

Malware in sbrugna...

EUVD-2014-1100

Malware in sbrugna...

EUVD-2014-1097

Malware in sbrugna...

EUVD-2023-36410

Malicious code in bioql PyPI...

EUVD-2023-36411

Malicious code in bioql PyPI...

EUVD-2023-36405

Malicious code in bioql PyPI...

EUVD-2023-36412

Malicious code in bioql PyPI...

EUVD-2023-36406

Malicious code in bioql PyPI...

EUVD-2023-36413

Malicious code in bioql PyPI...

EUVD-2023-36408

Malicious code in bioql PyPI...

EUVD-2023-36407

Malicious code in bioql PyPI...

EUVD-2023-36404

Malicious code in bioql PyPI...

CVE-2014-10025

Multiple cross-site request forgery CSRF vulnerabilities in D-Link DAP-1360 with firmware 2.5.4 and earlier allow remote attackers to hijack the authentication of unspecified users for requests that change the 1 Enable Wireless, 2 MBSSID, 3 BSSID, 4 Hide Access Point, 5 SSID, 6 Country, 7 Channel...