critical
advisory
D-Link DIR-505: Web management backdoor vulnerability (CVE-2026-118579)
A weakness in the D-Link DIR-505 (version 1.10B02) Web Management CGI component allows for remote backdoor creation via argument manipulation.
CVE search metadata
CVE search record: CVE-2026-118579. Severity: critical. CVSS: 9.8. KEV: no. Product: DIR-505 (1.10B02). Brief: D-Link DIR-505: Web management backdoor vulnerability (CVE-2026-118579). Brief link: https://feed.craftedsignal.io/briefs/2026-10-dlink-dir505-backdoor/
Triage facts
Revision 1- Applicability
- DIR-505 (1.10B02)
- Evidence
- Unknown
- Severity
- Critical
- Sources
- 1 public source
- Freshness
- Revision 1Oct 29, 00:59 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
A vulnerability has been identified in the main function of /secmark1524.cgi within the Web Management CGI component of D-Link DIR-505 firmware version 1.10B02. Manipulating the accu, pass, code, hash, or cmds arguments results in a backdoor. The attack can be performed remotely, and public exploit code is available.