Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwd_set results in improper access controls. The attack must originate from the local network. The exploit has been released to the public and may be used for attacks.
Priority
MEDIUM
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
RISING
| Date | Total | Labels |
|---|
| 2026-09-19 | 1 | Disclosure1 |
| 2026-09-20 | 1 | Disclosure1 |
| 2026-09-21 | 5 | Disclosure1Exploit1PoC3 |
| 2026-09-22 | 1 | Disclosure1 |
| 2026-10-19 | 1 | Disclosure1 |
🛡️ #ExploitGrid Daily #Threat Digest Top Vulnerabilities (CVEs) of the day CVE-2026-88854 - EXPLOIT CVE-2026-94036 - EXPLOIT CVE-2026-94003 CVE-2026-94089 CVE-2026-94097 ..🧵👇
Post summary
The tweet lists several CVEs and tags some as "EXPLOIT," but offers no PoC, tool, active exploitation, patch, or technical details, indicating a general disclosure of vulnerabilities.
Top CVEs w/ public exploits (Sep 21): CVE-2026-88854 Joomla Extension - https://OrdaSoft.com - Unauthenticat... CVE-2026-94036 D-Link DIR-X1860/DIR-X1860Z routerd ubus access... CVE-2026-86555 Hardcoded Key Vulnerability in ZTE SmartLife APP Protect via https://exploitgrid.net
Post summary
The post enumerates three CVEs from September 21st that reportedly have public exploits available, highlighting the existence of PoC code and directing users to a commercial protection platform.
🔴 CRITICAL / PoC Available ├ CVE-2026-88854 — Joomla (OrdaSoft) · Unauth SQLi └ CVE-2026-94036 — D-Link DIR-X1860 · ubus ACL bypass
Post summary
The post discloses two CVEs (CVE-2026-88854 and CVE-2026-94036) with their vulnerability types (Unauth SQLi and ubus ACL bypass) and labels the content as 'PoC Available,' but provides no Proof of Concept, exploit tool, patch, or evidence of active exploitation; the primary takeaway is a vulnerability disclosure.
A PoC/exploit has been discovered for vulnerability CVE-2026-94036 PT ID: PT-2026-95901 Vendor: D-Link Product: DIR-X1860 Description: A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwd_set results in improper access controls. The attack must originate from the local network. The exploit has been released to the public and may be used for attacks. References: • https://dbu.gs/vulnerability/PT-2026-95901 • https://github.com/djzzlim/cve-2026-94036
Post summary
The text announces a publicly released PoC exploit for CVE-2026-94036 affecting D-Link routers, detailing technical aspects of an improper access control vulnerability, and provides a direct link to the exploit code repository.
🔴 CRITICAL / PoC Available CVE-2026-88854: Joomla (OrdaSoft) · Unauth SQLi CVE-2026-94036: D-Link DIR-X1860 · ubus ACL bypass
Post summary
The post highlights two critical CVEs (CVE-2026-88854 and CVE-2026-94036) with explicit PoC availability and brief technical vulnerability descriptions, but does not mention exploits, active attacks, or patches.
[CVE] CVE-2026-94036 [CRITICAL/PoC] #D-Link DIR-X1860/DIR-X1860Z routerd ubus access control ⚠️ Recorded Exploit Available 🔗 https://exploitgrid.net/cve/CVE-2026-94036
Post summary
The tweet highlights CVE-2026-94036 in D-Link routers with a referenced Proof of Concept (PoC) and links to exploitgrid.net, focusing on the availability of exploitable details rather than active use or mitigation steps.
We have just added an important vulnerability affecting D-Link DIR-X1860 and DIR-X1860Z (CVE-2026-94036) https://vuldb.com/vuln/407965
Post summary
The tweet announces the addition of CVE-2026-94036 affecting D-Link DIR-X1860 and DIR-X1860Z routers to the VulDB vulnerability database, serving as a disclosure notification without technical details, PoC, exploit, or patch information.
CVE-2026-94036: D-Link DIR-X1860 access control flaw (CVSS 8.8), public exploit out. No patch yet - restrict local access and watch for firmware. #CVE #infosec #DLink https://www.valtersit.com/cve/CVE-2026-94036 #DLink #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker
Post summary
The text discloses CVE-2026-94036, an access control flaw (CVSS 8.8) in D-Link DIR-X1860, notes a public exploit is available, and advises temporary mitigation by restricting local access while awaiting firmware updates. The primary focus is announcing the vulnerability with technical details rather than highlighting a named exploit tool or active exploitation.
CVE-2026-94036 A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the… https://www.cve.org/CVERecord?id=CVE-2026-94036
Post summary
The text announces a security flaw in D-Link DIR-X1860 and DIR-X1860Z up to a specific version, with no PoC, exploit tool, active exploitation, or patch information provided.