CVE-2018-10957: D-Link Dir-868l Firmware

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

CSRF exists on D-Link DIR-868L devices, leading to (for example) a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components.

Affected products

• D-Link Dir-868l Firmware: version 1.12 only

Published 2018-05-10. Last modified 2026-06-17.