Vulnerability Description
A vulnerability was found in D-Link DIR-615 4.10. This issue affects some unknown processing of the file /set_temp_nodes.php of the component URL Filter. The manipulation results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dlink | Dir-615 Firmware | 4.10 |
| Dlink | Dir-615 | d |
Related Weaknesses (CWE)
References
- https://pentagonal-time-3a7.notion.site/D-Link-DIR-615-2e7e5dd4c5a580109a14fdeb6ExploitThird Party Advisory
- https://vuldb.com/?ctiid.343117Permissions RequiredVDB Entry
- https://vuldb.com/?id.343117Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.737061Third Party AdvisoryVDB Entry
- https://www.dlink.com/Product
FAQ
What is CVE-2026-1505?
CVE-2026-1505 is a vulnerability with a CVSS score of 7.2 (HIGH). A vulnerability was found in D-Link DIR-615 4.10. This issue affects some unknown processing of the file /set_temp_nodes.php of the component URL Filter. The manipulation results in os command injecti...
How severe is CVE-2026-1505?
CVE-2026-1505 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-1505?
Check the references section above for vendor advisories and patch information. Affected products include: Dlink Dir-615 Firmware, Dlink Dir-615.