D-Link Dir-x1860z vulnerabilities

2 CVEs affecting D-Link Dir-x1860z, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-94050, published 2026-09-20.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-94036, published 2026-09-20. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The…
• CVE-2026-94050, published 2026-09-20. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the function routerd.wificfg_get/routerd.get_rand_key of the component ubus JSON-RPC interface. Such…