CVE-2026-118579
D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
The D-Link DIR-505 router's web management interface is affected, specifically a component handling requests to a particular CGI script. Successful exploitation could allow a remote attacker to gain unauthorized backdoor access to the device.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the component Web Management CGI. This manipulation of the argument accu/pass/code/hash/cmds causes backdoor. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
Affected versions
- D-Link DIR-505
1.10B02