CVE-2026-95675

Name of the Vulnerable Software and Affected Versions D-Link DAP-1360 versions 6.14 and earlier

Description An unauthenticated remote code execution issue exists in the web management interface. Remote attackers can execute arbitrary commands with root privileges by sending crafted HTTP requests to the device without providing valid credentials. Successful exploitation allows for full device compromise, enabling persistent configuration modifications and the use of the device as a pivot point to access the local network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.