Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
A vulnerability was found in D-Link DIR-615 4.10. This vulnerability affects unknown code of the file adv_routing.php of the component Web Configuration Interface. Performing a manipulation of the argument dest_ip/ submask/ gw results in os command injection. The attack may be initiated remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-02-08 | 2 | Active Exploitation1General1 |
| 2026-03-09 | 1 | General1 |
CVE-2026-2152 A vulnerability was found in D-Link DIR-615 4.10. This vulnerability affects unknown code of the file adv_routing.php of the component Web Configuration Interface. Perf… https://www.cve.org/CVERecord?id=CVE-2026-2152
Post summary
The post announces CVE‑2026‑2152, a vulnerability in the D‑Link DIR‑615 router’s adv_routing.php component, but provides no additional exploitation, patch, or technical detail.
📌 Top CVEs recientes (CVSS>=7.0): 1. 🛠️ CVE-2026-2155 (CVSS: 7.2) 2. 🛠️ CVE-2026-2152 (CVSS: 7.2) 3. 🛠️ CVE-2026-2151 (CVSS: 7.2) 4. 🛠️ CVE-2026-2143 (CVSS: 7.2) 5. 🛠️ CVE-2026-2142 (CVSS: 7.2) #CyberSecurity #CVE #Infosec
Post summary
The post enumerates five recent CVEs with CVSS 7.2 scores but provides no further technical or mitigative information.
🚨 HIGH-severity OS command injection in D-Link DIR-615 (v4.10) lets attackers execute remote commands with no auth needed. Devices are unsupported & public exploits are live — isolate or replace ASAP! https://radar.offseq.com/threat/cve-2026-2152-os-command-injection-in-d-link... https://t.co/T6p3dpKuOd
Post summary
CVE‑2026‑2152 is a high‑severity OS command injection vulnerability in D‑Link DIR‑615 that allows unauthenticated remote command execution, and public exploits are currently active; devices should be isolated or replaced immediately.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | dir-615 | - | - | - |
| OS | dlink | dir-615_firmware | 4.10 | - | - |