CVE-2021-44127: D-Link Dap-1360f1 Firmware

Critical severity, CVSS 9.8. EPSS: 3.4% chance of exploitation in the next 30 days.

In DLink DAP-1360 F1 firmware version <=v6.10 in the "webupg" binary, an attacker can use the "file" parameter to execute arbitrary system commands when the parameter is "name=deleteFile" after being authorized.

Affected products

• D-Link Dap-1360f1 Firmware: up to and including 6.10

Published 2022-03-27. Last modified 2026-06-17.