D-Link has recently addressed significant vulnerabilities in its DIR-X1860Z router by releasing a new firmware update. These security gaps could potentially allow attackers on the same network to alter the administrator password and access sensitive Wi-Fi configuration data.
Security Advisory Details
The vulnerabilities were highlighted in D-Link’s advisory SAP10513, published on August 26, 2026. The initial report was submitted by security researcher Lim Kar Joon on August 18, 2026. Affected users are those using the non-US version of the DIR-X1860Z router, specifically hardware revision A1 with firmware V1.0.2.220120.165402.
The flaws reside within the router’s OpenWrt-based ubus JSON-RPC management interface, accessible via TCP port 23355. This interface is crucial for managing privileged router operations, which has now been shown to have serious security weaknesses.
Potential Risks and Impact
The primary risk involves the routerd.passwd_set method, which can be exploited without requiring proper authentication. An attacker gaining access to the local network could reset the router’s administrator password, subsequently allowing them to control the device’s settings and management functions.
Furthermore, an information-disclosure flaw in the same management interface could expose wireless configuration details. Methods like routerd wificfg_get and routerd.get_rand_key could be misused to obtain Wi-Fi credentials, posing a significant risk of unauthorized network access.
Firmware Update and Recommendations
D-Link has classified these vulnerabilities as issues of improper access control, authorization, and information disclosure. The company has not yet assigned CVE identifiers or CVSS scores to these flaws. However, they have promptly addressed the issues with firmware version V1.0.7.260821.161908, finalized on August 25, 2026. Users are strongly encouraged to update to this version or newer to mitigate these risks.
Before applying the update, administrators should ensure their device is indeed the DIR-X1860Z model and verify its hardware revision. It is crucial not to confuse it with the DIR-X1860 model, which has been discontinued and is no longer supported. Installing the wrong firmware could lead to further complications.
Conclusion
Ensuring the security of network devices like routers is vital in protecting against unauthorized access and data breaches. Users of the affected D-Link DIR-X1860Z routers should promptly install the latest firmware update to safeguard their networks. This proactive measure can prevent potential exploitation of these vulnerabilities and help maintain secure network environments.
