Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was determined in D-Link M60 up to 1.20B02. Affected by this issue is some unknown functionality of the file /usr/bin/httpd. This manipulation causes weak password recovery. The attack can be initiated remotely. A high degree of complexity is needed for the attack. The exploitation is known to be difficult. The exploit has been publicly disclosed and may be utilized.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-7554 A vulnerability was determined in D-Link M60 up to 1.20B02. Affected by this issue is some unknown functionality of the file /usr/bin/httpd. This manipulation causes we… https://www.cve.org/CVERecord?id=CVE-2026-7554
Post summary
The post reports a CVE in a D-Link device but provides no details on exploitation, mitigation, or evidence of real‑world impact.
CVE-2026-7554 Weak Password Recovery Vulnerability in D-Link M60 Up to 1.20B02 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7554
Post summary
The post merely announces a weak password recovery flaw in D-Link M60 firmware up to 1.20B02, without detailing exploits, patches, or active attacks.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | m60 | - | - | - |
| OS | dlink | m60_firmware | 1.20b02 | - | - |