CVE-2026-2054

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A security flaw has been discovered in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. Impacted is an unknown function of the component Wifi Setting Handler. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. This vulnerability only affects products that are no longer supported by the maintainer.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Feb 6, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-205405.3In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has conCVE-2026-205415.3In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE hasCVE-2026-205426.7In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actoCVE-2026-205435.5In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additionaCVE-2026-205446.8In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attaCVE-2026-20557.5A weakness has been identified in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The affected element is an unknown function of the componentCVE-2026-20567.5A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted element is an unknown function of tCVE-2026-20579.8A vulnerability was detected in SourceCodester Medical Center Portal Management System 1.0. This affects an unknown function of the file /loCVE-2026-205796.7In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actoCVE-2026-20589.8A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown funCVE-2026-205868.8In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no adCVE-2026-205876.7In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious
CVE-2026-2054: High severity, CVSS 7.5 | Vulnix