CVE-2026-2054

CWE-200 — Information ExposureCWE-284 — Improper Access Control3 documents3 sources
Severity
5.5MEDIUM
EPSS
0.1%
top 75.36%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
D-link Dir-605lD-link Dir-619lDlink Dir-605l Firmware+1 more
Timeline
PublishedFeb 6

Description

A security flaw has been discovered in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. Impacted is an unknown function of the component Wifi Setting Handler. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Affected Packages4 packages

▶CVEListV5d-link/dir-605l2.06B01, 2.13B01+1
▶CVEListV5d-link/dir-619l2.06B01, 2.13B01+1

🔴Vulnerability Details

2
GHSA
GHSA-59x9-vr3m-f832: A security flaw has been discovered in D-Link DIR-605L and DIR-619L 2↗2026-02-06
▶
CVEList
D-Link DIR-605L/DIR-619L Wifi Setting information disclosure↗2026-02-06
▶