CVE-2026-4377Disclosure

LOWCVSS 6.0 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Dlink DWR-X1820 router uses weak default password generated from its IMEI number and does not require users to change it. An attacker who knows how passwords are generated can easily crack the default password if they have the device IMEI number. This issue was fixed in version 1.00B16CP.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-1391

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-05-28); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-05-28: 1Mentions · 2026-05-29: 1Patch / Workaround · 2026-05-29: 1Technical Details · 2026-05-28: 105-2805-29
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets2 URLs
By indicator
Classification over time
DateTotalLabels
2026-05-281
Disclosure1
2026-05-291
Patch1
Full discourse2 posts
  • Misbar | مسبار@MisbarSec
    Patch

    📌 ثغرة في جهاز التوجيه D-Link DWR-X1820 تم اكتشاف ثغرة أمنية في جهاز التوجيه D-Link DWR-X1820، والتي تحمل رقم CVE-2026-4377. تؤثر هذه الثغرة على الإصدارات من 1.00B14CP إلى 1.00B16CP. يمكن للمهاجمين استغلال هذه الثغرة لتنفيذ هجمات سيبرانية. يُنصح بتحديث البرنامج الثابت للجهاز إلى أحدث إصدار متاح. 🔗 للمزيد: https://cert.pl/en/posts/2026/05/CVE-2026-4377/

    Post summary

    The post announces CVE-2026-4377 for D-Link DWR-X1820 routers, recommending firmware updates to mitigate the issue, but does not provide exploit code or evidence of active exploitation.

    000401.9K
    299 followersView on X
  • Israel@f1tym1
    Disclosure

    Vulnerability in D-Link DWR-X1820 router https://ift.tt/HK1kZ7c Use of Weak Credentials vulnerability (CVE-2026-4377) has been found in DWR-X1820 router. Introduction to Malware Binary Triage (IMBT) Course Looking to level up your skills? Get 10% off using coupon code: MWNE…

    Post summary

    The post announces a weak‑credentials vulnerability (CVE‑2026‑4377) affecting the D‑Link DWR‑X1820 router, linking to an external resource but providing no exploit code, patch, or evidence of active exploitation.

    0000044
    978 followersView on X

Explore more