CVE-2026-52356
N/AAn OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1_FW101WWb04 allows attackers to execute arbitrary commands via injecting arbitrary shell metacharacters.
No known exploitation, public exploit, or elevated probability at this time. Track for changes.
Exploitation likelihood
1.0%chance of exploitation in 30 days · 63rd percentile
Impact if exploited
—CVSS · not scored
- No impact metrics
Proof of concept
No public PoC is currently catalogued.
Search for new PoCs
Search GitHub now — results may be empty or unverified.
Tracked sources are checked daily for recent CVEs, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.
Data snapshot:
Affected
CPE data not yet published (analysis pending).
Weakness (CWE)
Not classified.
CVSS vector
Not yet scored.
References and research data (JSON)
References
Advisories
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-109093 EUVD · EUVD-2026-109093
Technical & other
- https://www.dlink.com/en/security-bulletin/CVE record · mitre · Updated 2026-10-23T15:35:09.599Z
NVD · CVE-2026-52356 · Updated 2026-10-23T19:57:42.660 - https://github.com/REYu6/iot/blob/main/CVE/dlink/DAP1160LA1_FW101WWb04/DAP1160LA1_FW101WWb04_RCE.mdCVE record · mitre · Updated 2026-10-23T15:35:09.599Z
NVD · CVE-2026-52356 · Updated 2026-10-23T19:57:42.660