CVE-2026-95675Disclosure

LOWCVSS 9.3 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch affected systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

D-Link DAP-1360 firmware version 6.14 and earlier contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted requests to the device's web management interface without valid credentials. Attackers can fully compromise the device to persistently modify its configuration and use it as a pivot point into the local network.

Back to dashboard

2.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Public PoC is present in monitored signal
Patch or workaround signal is available
10 mentions across 5 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 4 signals
Patch or workaround mentioned in 2 signals
Technical details provided in 8 signals
Disclosure: 5 classified signals
General: 1 classified signal
Peaked 3d ago at 3 mentions (2026-09-23); latest day: 1
10 total mentions across 5 days

Deep dive

Activity timeline10 mentions / 5d

Signal classification3 categories

Disclosure

550.0%

PoC

440.0%

General

110.0%

Referenced assets11 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-22	2	Disclosure2
2026-09-23	3	PoC3
2026-09-24	2	Disclosure1PoC1
2026-10-04	2	Disclosure2
2026-10-15	1	General1

Full discourse10 posts

Rıdvan Yağlı@ridvanyagli44d
PoC
🔴 CVE-2026-95675 - D-Link DAP-1360 RevB (firmware 2.14B05) için unauthenticated RCE PoC yayınlandı. Açık, hardcoded authentication bypass ile OS command injection'ın zincirlenmesi sonucu saldırganın root yetkisiyle uzaktan komut çalıştırmasına izin veriyor. https://github.com/d6fault/CVE-2026-95675
Post summary
The tweet announces a publicly released Proof of Concept for CVE-2026-95675, detailing an unauthenticated remote code execution vulnerability in D-Link DAP-1360 RevB firmware 2.14B05 via a hardcoded authentication bypass and OS command injection chain, with a GitHub link provided.
01074423
2.5K followersView on X
♫Why♥Not♪@Python_s_45d
PoC
🚨 ALERT — CRITICAL D-LINK RCE DATE: September 22, 2026 DISCLOSED BY: VulnCheck / D6fault VENDOR: D-Link PRODUCT: D-Link DAP-1360 CVE: CVE-2026-95675 IMPACT: An unauthenticated attacker with network access to the web management interface can inject OS commands and execute arbitrary code as root, enabling full device compromise and potential network pivoting. AFFECTED VERSIONS: DAP-1360 firmware 6.14 and earlier EXPLOITATION STATUS: Public PoC confirmed. No confirmed in-the-wild exploitation found at this time. Not currently listed in CISA KEV. URGENT ACTION: Retire and replace affected DAP-1360 devices. D-Link confirms the product is End-of-Life / End-of-Service. Until replacement, restrict management access to trusted administrative networks and do not expose the interface to untrusted networks. SOURCE: https://www.vulncheck.com/advisories/d-link-dap-1360-unauthenticated-rce-via-web-management-interface?utm_source=chatgpt.com VENDOR EOL ADVISORY: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10451 #CyberSecurity #InfoSec #ThreatIntel #DLink #CVE #CVE202695675 #RCE #NetworkSecurity #Vulnerability #SecOps
Post summary
The alert announces a critical RCE in D-Link DAP-1360, confirming a public PoC and advising replacement or network isolation of affected devices.
0001094
224 followersView on X
Daily CyberSecurity@Daily_CyberSec46d
PoC
Technical details and a PoC for the D-Link DAP-1360 vulnerability (CVE-2026-95675) are public. Learn how this unauthenticated flaw impacts legacy routers. #DLink #DAP1360 #CVE202695675 #RCE #RouterSecurity #Cybersecurity https://securityonline.info/d-link-dap-1360-vulnerability-poc/
Post summary
The post's main point is that technical details and a PoC for CVE-2026-95675 affecting the D-Link DAP-1360 are publicly available, with an emphasis on unauthenticated RCE risk.
00001409
13.0K followersView on X
ThreatAft@ThreatAft46d
Disclosure
🚨 D-LINK DAP-1360 CVE-2026-95675 — CVSS 9.8 Unauthenticated root RCE. One crafted HTTP request to the web management interface. Firmware ≤ 6.14 affected. No confirmed fix. → https://threataft.com/articles/d-link-dap-1360-cve-2026-95675-unauthenticated-root-rce #DLink #CVE #RCE #PatchNow #CyberSecurity #ThreatIntel
Post summary
The tweet discloses CVE-2026-95675 affecting D-Link DAP-1360 with CVSS 9.8, describing an unauthenticated root RCE via a single crafted HTTP request on firmware ≤6.14 and notes no confirmed fix.
0000151
43 followersView on X
TRONCAL Yannick@ytroncal23d
General
What CVE-2026-95675 Teaches About End-of-Life Wireless Hardware https://dev.to/facilishz/what-cve-2026-95675-teaches-about-end-of-life-wireless-hardware-2j77
Post summary
The tweet shares a link to a blog post about CVE-2026-95675 related to end-of-life wireless hardware but provides no PoC, exploit details, patch information, or exploitation claims in the tweet text itself.
0000025
158 followersView on X
zoomeyebot@zoomeyebot34d
Disclosure
🚨 D-Link DAP-1360 End-of-Life Router Hit by Unauthenticated Root Command Injection (CVE-2026-95675) Critical Vulnerability Alert! D-Link DAP-1360 is affected by CVE-2026-95675. 🔍 Identify Targets via ZoomEye: Search Dork: app="D-Link DAP-1360" Exposure: 423 instances identified globally. ZoomEye Search Link: 👉 https://www.zoomeye.ai/searchResult?q=YXBwPSJELUxpbmsgREFQLTEzNjAi #Infosec #CyberSecurity #ZoomEye
Post summary
The tweet discloses a critical unauthenticated root command injection vulnerability (CVE-2026-95675) affecting the end‑of‑life D‑Link DAP‑1360 router, providing the CVE ID and technical description, and includes a ZoomEye search to locate exposed devices, but offers no PoC, exploit, patch, or evidence of active exploitation.
0000042
26 followersView on X
Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters34d
Disclosure
CVE-2026-95675: unauthenticated RCE as root in D-Link DAP-1360 firmware 6.14 and earlier via the web management interface. CVSS 9.8. No patch available - if you expose this device, assume full compromise. Segment it or retire it now. https://www.valtersit.com/cve/CVE-2026-95675/ #CVE #infosec #DLink #DLink #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker
Post summary
The tweet announces CVE-2026-95675, an unauthenticated root RCE in D-Link DAP-1360 firmware 6.14 and earlier with CVSS 9.8, notes that no patch is available and recommends segmenting or retiring the device, with no PoC, exploit tool, or evidence of active exploitation provided.
0000065
1.0K followersView on X
NotCVE@notCVE44d
Disclosure
🎯 Most likely to be exploited next (EPSS): • CVE-2026-74849 — EPSS 4.6% · CVSS 9.8 • CVE-2026-95675 — EPSS 3.9% · CVSS 9.8 • CVE-2026-76978 — EPSS 3.7% · CVSS 8.8 📄 Full weekly tables → https://github.com/notcve/reports/blob/main/weekly/2026-09-24.md
Post summary
The text announces upcoming/high-risk CVEs with EPSS and CVSS scores and links to a weekly report, but provides no PoC, exploit, patch, or active-exploitation evidence.
0000039
75 followersView on X
Hephaestvs@Vulcanux_45d
PoC
csirt_it: ‼️ #PoC #DLink: disponibile Proof of Concept (PoC) per la CVE-2026-95675, presente nei dispositivi # DAP1360 Rischio: 🔴 Tipologia: 🔸 Remote Code Execution 🔗 https://www.acn.gov.it/portale/w/d-link-poc-pubblico-per-lo-sfruttamento-della-cve-2026-95675 ⚠️ Attenzione: dispositivi in #EOL https://t.co/1MZ5Le8jbH
Post summary
Italian CSIRT announces a publicly available PoC for CVE-2026-95675, a remote code execution flaw affecting D-Link DAP1360 end-of-life devices.
0000040
640 followersView on X
VulDB 🛡@vuldb46d
Disclosure
There is a new vulnerability with elevated criticality in D-Link DAP-1360 (CVE-2026-95675) https://vuldb.com/vuln/408426
Post summary
A brief announcement of a critical vulnerability in D-Link DAP-1360 (CVE-2026-95675) with a link to vuldb; lacks technical details, exploit info, and remediation guidance.
00000131
2.3K followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-95675

Rıdvan Yağlı[verified]@ridvanyagliPoC

The tweet announces a publicly released Proof of Concept for CVE-2026-95675, detailing an unauthenticated remote code execution vulnerability in D-Link DAP-1360 RevB firmware 2.14B05 via a hardcoded authentication bypass and OS command injection chain, with a GitHub link provided.

♫Why♥Not♪[verified]@Python_s_PoC

The alert announces a critical RCE in D-Link DAP-1360, confirming a public PoC and advising replacement or network isolation of affected devices.

zoomeyebot[verified]@zoomeyebotDisclosure

The tweet discloses a critical unauthenticated root command injection vulnerability (CVE-2026-95675) affecting the end‑of‑life D‑Link DAP‑1360 router, providing the CVE ID and technical description, and includes a ZoomEye search to locate exposed devices, but offers no PoC, exploit, patch, or evidence of active exploitation.

Hugo | DevOps | Cybersecurity 🇱🇻[verified]@HugoValtersDisclosure

The tweet announces CVE-2026-95675, an unauthenticated root RCE in D-Link DAP-1360 firmware 6.14 and earlier with CVSS 9.8, notes that no patch is available and recommends segmenting or retiring the device, with no PoC, exploit tool, or evidence of active exploitation provided.

Daily CyberSecurity@Daily_CyberSecPoC

The post's main point is that technical details and a PoC for CVE-2026-95675 affecting the D-Link DAP-1360 are publicly available, with an emphasis on unauthenticated RCE risk.

ThreatAft@ThreatAftDisclosure

The tweet discloses CVE-2026-95675 affecting D-Link DAP-1360 with CVSS 9.8, describing an unauthenticated root RCE via a single crafted HTTP request on firmware ≤6.14 and notes no confirmed fix.

TRONCAL Yannick@ytroncalGeneral

The tweet shares a link to a blog post about CVE-2026-95675 related to end-of-life wireless hardware but provides no PoC, exploit details, patch information, or exploitation claims in the tweet text itself.

NotCVE@notCVEDisclosure

The text announces upcoming/high-risk CVEs with EPSS and CVSS scores and links to a weekly report, but provides no PoC, exploit, patch, or active-exploitation evidence.