Dashboard / CVE-2026-7554

CVE-2026-7554

LOW
INFO Priority: 0.03 BB Relevance: 66/100
Published: 2026-05-01 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: High
PR: None
UI: None
S: X
AT: None
VC: Low
VI: Low
VA: Low

Description

A vulnerability was determined in D-Link M60 up to 1.20B02. Affected by this issue is some unknown functionality of the file /usr/bin/httpd. This manipulation causes weak password recovery. The attack can be initiated remotely. A high degree of complexity is needed for the attack. The exploitation is known to be difficult. The exploit has been publicly disclosed and may be utilized.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
dlink m60_firmware 1.20b02

References & Advisories (5)

https://vuldb.com/submit/805642
Third Party Advisory VDB Entry
https://vuldb.com/vuln/360362
Third Party Advisory VDB Entry
https://vuldb.com/vuln/360362/cti
Permissions Required VDB Entry
https://www.yuque.com/iam0range/rle72q/dhs1zsbgtm1ne0y1
Exploit Mitigation Third Party Advisory

Bug Bounty Relevance

66 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

2.9 / 10.0 v4.0
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

1.10%
Raw Score 0.010970
Percentile 65.5%
Date 2026-10-29

EPSS Trend

2026-10-29
0.01097
2026-10-28
0.01097

Intelligence Sources

nvd ref →

External Links