D-Link DIR-X1860Z ubus JSON-RPC interface routerd.get_rand_key information disclosure
cve-program · CVE-2026-94050
PublishedA vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the function routerd.wificfg_get/routerd.get_rand_key of the component ubus JSON-RPC interface. Such manipulation leads to information disclosure. The attack must be carried out from within the local network. Upgrading to version 1.0.7.260821.161908 is able to address this issue. It is suggested to upgrade the affected component. This vulnerability only affects products that are no longer supported by the maintainer.
Read the publisher's advisoryAffected versions, risk and source history
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2026-94050 · CVE overview and exploitation status
cve-program · CVE-2026-94050
- https://vuldb.com/vuln/407979
- https://vuldb.com/vuln/407979/cti
- https://vuldb.com/cve/CVE-2026-94050
- https://vuldb.com/submit/949817
- https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10513
- https://support.dlink.com/resource/SECURITY_ADVISEMENTS/DIR-X1860Z/DIR-X1860Z_REVA_FIRMWARE_V1.0.7.260821.161908_HOTFIX.zip
- https://www.dlink.com/
Related changes
Linked by CVE identifierNo related changes are available here.