Medium 5.6

A vulnerability was determined in D-Link M60 up to 1.20B02. Affected by this issue is some unknown functionality of the file /usr/bin/httpd. This manipulation causes weak password recovery. The attack...

CVE-2026-7554 First seen on SecPulse May 1, 15:16

Original description The description as published by the source.

A vulnerability was determined in D-Link M60 up to 1.20B02. Affected by this issue is some unknown functionality of the file /usr/bin/httpd. This manipulation causes weak password recovery. The attack can be initiated remotely. A high degree of complexity is needed for the attack. The exploitation is known to be difficult. The exploit has been publicly disclosed and may be utilized.

Source: NIST National Vulnerability Database NVD

References

Key facts

CVSS v3: Medium 5.6; CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4: Low 2.9; CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Published: May 1, 2026
First seen on SecPulse: May 1, 15:16
CWE: CWE-640

NVD

Tags(click for explanation)

All

CWE-640 Dlink M60 Firmware M60

Detection sources

NIST National Vulnerability DatabaseOct 27, 06:10