Is CVE-2026-94050 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-94050 being exploited in the wild.

How severe is CVE-2026-94050?

Medium severity, with a CVSS score of 4.3, published 20 September 2026.

Which products and versions are affected?

D-Link DIR-X1860Z up to 1.0.2.220120.165402.

Is there a fix for CVE-2026-94050?

A patch was published on 2026-08-25: Firmware version 1.0.7.260821.161908 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-94050 attacked?

It is attacked from the adjacent network, in a network appliance.

Am I affected by CVE-2026-94050?

Check whether you run D-Link DIR-X1860Z at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-94050: D-Link DIR-X1860Z information disclosure in ubus JSON-RPC

CVE-2026-94050 · Severity: medium · CVSS 4.3 · Published 2026-09-20

The D-Link DIR-X1860Z router's web management interface contains a flaw that allows unauthenticated attackers on the local network to access wireless configuration data, including WiFi credentials. An attacker with access to the router's network can extract sensitive wireless settings without needing to log in, compromising the security of wireless networks protected by that device.

Vendors: D-Link.

Quick answers

Is CVE-2026-94050 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-94050 being exploited in the wild.
How severe is CVE-2026-94050?: Medium severity, with a CVSS score of 4.3, published 20 September 2026.
Which products and versions are affected?: D-Link DIR-X1860Z up to 1.0.2.220120.165402.
Is there a fix for CVE-2026-94050?: A patch was published on 2026-08-25: Firmware version 1.0.7.260821.161908 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-94050 attacked?: It is attacked from the adjacent network, in a network appliance.
Am I affected by CVE-2026-94050?: Check whether you run D-Link DIR-X1860Z at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability exists in the ubus JSON-RPC management interface (TCP port 23355), specifically in the routerd.wificfg_get and routerd.get_rand_key methods, which lack proper authentication checks. An unauthenticated attacker with local network access can call these methods to retrieve wireless configuration data including credentials. The issue is resolved in firmware version 1.0.7.260821.161908 and later.

Affected products

D-Link DIR-X1860Z up to 1.0.2.220120.165402

Timeline

2026-08-18: disclosed
2026-08-25: patched: Firmware version 1.0.7.260821.161908 released
2026-09-20: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.