CVE-2021-41445: D-Link Dir-x1860 Firmware

Medium severity, CVSS 6.1. EPSS: 1.9% chance of exploitation in the next 30 days.

A reflected cross-site-scripting attack in web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to execute code in the device of the victim via sending a specific URL to the unauthenticated victim.

Affected products

• D-Link Dir-x1860 Firmware: up to and including 1.03

Published 2022-02-10. Last modified 2026-07-09.