D-Link Router Flaws Let Unauthenticated Attackers Change Admin Password and Steal Wi

Cybersecuritynews •Abinaya • August 31, 2026

D-Link has released a firmware update for critical access-control and information-disclosure flaws affecting its DIR-X1860Z router. The vulnerabilities could allow an unauthenticated attacker connected to the local network to change the router administrator password and recover wireless configuration details, including Wi-Fi credentials. The security issues were disclosed in D-Link advisory SAP10513, published on August 26, […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

D-Link DIR-X1860Z Vulnerabilities Allow Admin Password Reset by Unauthenticated Attackers D-Link has released a firmware update addressing critical vulnerabilities in the DIR-X1860Z router. These flaws allow unauthenticated attackers on the local network to reset the administrator password and access wireless configuration details, including Wi-Fi credentials. The vulnerabilities affect the non-US hardware revision A1/V1.0 running firmware version V1.0.2.220120.165402. The security issues were disclosed in D-Link advisory SAP10513, published on August 26, 2026. Users are urged to apply the firmware update to mitigate these risks. The vulnerabilities pose a significant threat to home and small office networks, potentially exposing sensitive information. D-Link's advisory provides guidance on the update process for affected users. 2 sources 58

Extracted Entities

D-Link Router Flaws Let Unauthenticated Attackers Change Admin Password and Steal Wi

The full story

Extracted Entities

Attack Types (1)

CWE Weaknesses (1)

Platforms (2)