CVE-2026-1448: D-Link DIR-615 Web Management wiz_policy_3_machine.php os command injection
A vulnerability was detected in D-Link DIR-615 up to 4.10. This impacts an unknown function of the file /wizpolicy3machine.php of the component Web Management Interface. Performing a manipulation of the argument ipaddr results in os command injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1448?
CVE-2026-1448 has a medium severity rating due to its potential for OS command injection.
How do I fix CVE-2026-1448?
To remediate CVE-2026-1448, update the D-Link DIR-615 firmware to the latest version beyond 4.10.
Which systems are affected by CVE-2026-1448?
CVE-2026-1448 affects D-Link DIR-615 devices running firmware version 4.10 or earlier.
What type of vulnerability is CVE-2026-1448?
CVE-2026-1448 is classified as an OS command injection vulnerability.
How can CVE-2026-1448 impact my network security?
CVE-2026-1448 can allow an attacker to execute arbitrary commands on the affected D-Link DIR-615 device, compromising network security.