CVE-2014-10026: D-Link Dap-1360 Firmware

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

index.cgi in D-Link DAP-1360 with firmware 2.5.4 and earlier allows remote attackers to bypass authentication and obtain sensitive information by setting the client_login cookie to admin.

Affected products

• D-Link Dap-1360 Firmware: up to and including 2.5.4

Published 2015-01-13. Last modified 2026-06-17.