D-Link DIR-X1860Z Vulnerabilities Allow Admin Password Reset by Unauthenticated Attackers

D-Link has released a firmware update addressing critical vulnerabilities in the DIR-X1860Z router. These flaws allow unauthenticated attackers on the local network to reset the administrator password and access wireless configuration details, including Wi-Fi credentials. The vulnerabilities affect the non-US hardware revision A1/V1.0 running firmware version V1.0.2.220120.165402. The security issues were disclosed in D-Link advisory SAP10513, published on August 26, 2026. Users are urged to apply the firmware update to mitigate these risks. The vulnerabilities pose a significant threat to home and small office networks, potentially exposing sensitive information. D-Link's advisory provides guidance on the update process for affected users.

Key Points: • D-Link's DIR-X1860Z router has critical vulnerabilities allowing password resets. • Unauthenticated attackers on local networks can access sensitive Wi-Fi configuration data. • Affected systems include non-US hardware revision A1/V1.0 with specific firmware.