Password Recovery Weakness in D-Link M60 Router
CVE-2026-7554
6.3MEDIUM
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-7554?
A vulnerability exists in the D-Link M60 router which affects its password recovery functionality, allowing for potential remote exploitation. This weakness can be exploited through a manipulation of the router's web service, specifically within the /usr/bin/httpd file. Although the complexity of the attack is rated as high, the exploit has been publicly disclosed, which raises concerns about its potential utilization by malicious actors.
Affected Version(s)
M60 1.20B02
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V4
Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved
Credit
iam0range (VulDB User)