CVE-2026-11497

HighCVSS 8.8/10Last modified Jul 23, 2026

Description

A vulnerability has been found in D-Link DCS-5615 1.01.00. Affected by this vulnerability is an unknown functionality of the file /etc/conf.d/boa/boa.conf of the component Boa Webserver. Such manipulation leads to least privilege violation. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-266 CWE-272

Affected software

Vendor	Product	Versions
D-Link	DCS-5615	1.01.00

References

https://vuldb.com/cve/CVE-2026-11497Third Party Advisory, VDB Entry
https://vuldb.com/submit/834823Third Party Advisory, VDB Entry
https://vuldb.com/vuln/369117Third Party Advisory, VDB Entry
https://vuldb.com/vuln/369117/ctiPermissions Required, VDB Entry
https://www.dlink.com/Product
https://www.notion.so/D-link-DCS-5615_REV_1-01-00-3670ed14e5cb80e9be78f7d8dbf1e789?source=copy_linkVendor Advisory

Timeline

Published: Jun 8, 2026
Last modified: Jul 23, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-114988.8A vulnerability was found in Tenda HG7, HG9 and HG10 300001138_en_xpon. Affected by this issue is the function asp_voip_OtherSet of the file CVE-2026-114999.8A vulnerability was determined in Tenda HG7, HG9 and HG10 300001138_en_xpon. This affects the function formDOMAINBLK of the file /boaform/fo CVE-2026-11508.8A security flaw has been discovered in Totolink LR350 9.3.5u.6369_B20220309. Impacted is the function setTracerouteCfg of the file /cgi-bin/CVE-2026-115005.0A vulnerability was identified in Weaviate up to 1.37.7. This vulnerability affects the function validateConfig of the file usecases/auth/au CVE-2026-115017.3A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown proce CVE-2026-115023.1A weakness has been identified in JeecgBoot up to 3.9.2. Impacted is the function HttpServletResponse.sendRedirect of the file jeecg-module-CVE-2026-115038.8A security vulnerability has been detected in Tenda CX12L 16.03.53.12. The affected element is the function form_fast_setting_wifi_set of th CVE-2026-115048.8A vulnerability was detected in Tenda CX12L 16.03.53.12. The impacted element is the function setSchedWifi of the file /goform/openSchedWifi CVE-2026-115055.0A flaw has been found in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. This affects an unknown function of CVE-2026-115066.3A vulnerability has been found in CodeAstro Leave Management System 1.0. This impacts an unknown function of the file /admin/search_staff_fo CVE-2026-115076.3A vulnerability was found in CodeAstro Leave Management System 1.0. Affected is an unknown function of the file /admin/delete_leave_type.php CVE-2026-115086.3A vulnerability was determined in CodeAstro Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the f