A critical, unauthenticated command injection vulnerability (CVE-2026-95675) has been discovered in the D-Link DAP-1360 wireless access point, allowing remote attackers to execute commands with root privileges. This poses a significant risk to network security because compromised devices can serve as a pivot point for further attacks within a network, bypassing typical perimeter defenses. Given that D-Link has discontinued support for the DAP-1360, organizations should immediately inventory any instances of this device and prioritize replacement or implement strict network segmentation to mitigate the risk.
Read the full article at DEV Community
Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.
