CVE-2026-125079

A vulnerability was determined in D-Link DCS-6501LH 3.03.02. This impacts the function pf_get_onvif_user_pwd/mydlink_default_sys_info of the file /mnt/conf/SystemConfig.ini of the component Media Service. This manipulation of the argument pin_code causes hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

• CWE-259
• CWE-798

• https://github.com/XueDugu/dlink-dcs6501lh-media-service-credential-evidence
• https://vuldb.com/cve/CVE-2026-125079
• https://vuldb.com/submit/1041047
• https://vuldb.com/vuln/433190
• https://vuldb.com/vuln/433190/cti
• https://www.dlink.com/

Published

Nov 10, 2026

Last Modified

Nov 10, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-125072FFmpeg through 9.0.2 contains a NULL pointer dereference vul…4.7
• CVE-2026-125073FFmpeg through 9.0.2 contains an infinite loop vulnerability…5.5
• CVE-2026-125075A vulnerability has been found in SourceCodester Smart Atten…7.3
• CVE-2026-125076A vulnerability was found in SourceCodester Smart Attendance…7.3
• CVE-2026-125077A vulnerability was determined in SourceCodester Smart Atten…4.3
• CVE-2026-125078A security flaw has been discovered in SourceCodester Smart …6.3
• CVE-2026-125082A security flaw has been discovered in sunkaifei FlyCMS up t…3.5
• CVE-2026-125086A vulnerability has been found in D-Link M60 1.12.B01. Impac…10
• CVE-2026-125087A vulnerability was found in Michael-A-Kuykendall Shimmy up …7.3
• CVE-2026-125095FFmpeg through 9.0.2 contains an uninitialized memory use vu…3.3
• CVE-2026-125096FFmpeg through 9.0.2 contains an uninitialized memory disclo…3.3
• CVE-2026-125097FFmpeg through 9.0.2 contains an uninitialized memory disclo…3.3