CVE-2026-118579: D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor
Published Oct 28, 2026
·Updated
A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the component Web Management CGI. This manipulation of the argument accu/pass/code/hash/cmds causes backdoor. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
1 affected component
D-Link DIR-505=1.10B02
Event History
Oct 28, 2026
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which devices are affected?
The affected product identified is D-Link DIR-505 running version 1.10B02.
2
Does exploitation require authentication or user interaction?
No. The supplied vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
3
Is exploit code available?
Yes. The exploit has been made publicly available and could be used in attacks.