CVE-2026-1505

CWE-77 — Command InjectionCWE-78 — OS Command Injection3 documents3 sources
Severity
7.3HIGH
EPSS
0.7%
top 28.36%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
D-link Dir-615Dlink Dir-615 Firmware
Timeline
PublishedJan 28

Description

A vulnerability was found in D-Link DIR-615 4.10. This issue affects some unknown processing of the file /set_temp_nodes.php of the component URL Filter. The manipulation results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5d-link/dir-6154.10

🔴Vulnerability Details

2
CVEList
D-Link DIR-615 URL Filter set_temp_nodes.php os command injection↗2026-01-28
▶
GHSA
GHSA-jhqv-457v-r3vc: A vulnerability was found in D-Link DIR-615 4↗2026-01-28
▶