CVE-2026-4180: D-Link DIR-816 goahead redirect.asp access control
A vulnerability was identified in D-Link DIR-816 1.10CNB05. The impacted element is an unknown function of the file redirect.asp of the component goahead. The manipulation of the argument tokenid leads to improper access controls. The attack may be initiated remotely. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4180?
CVE-2026-4180 has been classified as a medium severity vulnerability due to improper access controls.
How do I fix CVE-2026-4180?
To mitigate CVE-2026-4180, update the D-Link DIR-816 to the latest firmware version that addresses this vulnerability.
What component is affected by CVE-2026-4180?
CVE-2026-4180 affects the redirect.asp file of the goahead component in D-Link DIR-816 routers.
What type of vulnerability is CVE-2026-4180?
CVE-2026-4180 is an access control vulnerability that can be exploited by manipulating the token_id argument.
Who is affected by CVE-2026-4180?
Users of the D-Link DIR-816 router version 1.10CNB05 are affected by CVE-2026-4180.