CVE-2026-1506

7.3 highEPSS 5.6%

High (7.3) in dlink dir-615 firmware. EPSS 5.6% chance of exploitation in the next 30 days.

A vulnerability was determined in D-Link DIR-615 4.10. Impacted is an unknown function of the file /adv_mac_filter.php of the component MAC Filter Configuration. This manipulation of the argument mac causes os command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. This vulnerability only affects products that are no longer supported by the maintainer.

Severity

CVSS 4.0

7.3 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 5.6% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWEs: CWE-78, CWE-77
Published: 2026-01-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dlink:dir-615_firmware

References

https://pentagonal-time-3a7.notion.site/DIR-615-MAC_FILTER-2e7e5dd4c5a58091b027f50271cc7c6a
https://vuldb.com/?ctiid.343118
https://vuldb.com/?id.343118
https://vuldb.com/?submit.737078
https://www.dlink.com/

Check your stack JSON