CVE-2026-2055

CWE-200 — Information ExposureCWE-284 — Improper Access Control3 documents3 sources
Severity
5.5MEDIUM
EPSS
0.1%
top 75.36%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
D-link Dir-605lD-link Dir-619lDlink Dir-605l Firmware+1 more
Timeline
PublishedFeb 6

Description

A weakness has been identified in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The affected element is an unknown function of the component DHCP Client Information Handler. Executing a manipulation can lead to information disclosure. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Affected Packages4 packages

▶CVEListV5d-link/dir-605l2.06B01, 2.13B01+1
▶CVEListV5d-link/dir-619l2.06B01, 2.13B01+1

🔴Vulnerability Details

2
GHSA
GHSA-3x27-4q29-j5f2: A weakness has been identified in D-Link DIR-605L and DIR-619L 2↗2026-02-06
▶
CVEList
D-Link DIR-605L/DIR-619L DHCP Client Information information disclosure↗2026-02-06
▶