CVE-2026-1505

A vulnerability was found in D-Link DIR-615 4.10. This issue affects some unknown processing of the file /set_temp_nodes.php of the component URL Filter. The manipulation results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.

• CWE-77
• CWE-78
• CWE-77

• https://pentagonal-time-3a7.notion.site/D-Link-DIR-615-2e7e5dd4c5a580109a14fdeb6f105cd6Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.343117Permissions Required, VDB Entry
• https://vuldb.com/?id.343117Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.737061Third Party Advisory, VDB Entry
• https://www.dlink.com/Product

Published

Jan 28, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-15044A flaw was found in the TrustyAI Service Operator. When depl…6.3
• CVE-2026-15045The Wallet System for WooCommerce WordPress plugin before 2.…6.5
• CVE-2026-15046The LitExtension WordPress plugin through 1.2.5 does not ver…4.2
• CVE-2026-15047The s2Member WordPress plugin before 260805 does not escape…6.8
• CVE-2026-15048The Geeky Bot WordPress plugin before 1.2.8 does not perfor…7.5
• CVE-2026-15049The Depicter — Popup & Slider Builder WordPress plugin befor…7.2
• CVE-2026-15052The MailChimp Subscribe Form, Optin Builder, PopUp Builder, …7.2
• CVE-2026-15053Tanium addressed a denial of service vulnerability in Tanium…7.5
• CVE-2026-15054The Bit Form WordPress plugin before 3.1.2 does not enforce…3.7
• CVE-2026-15055In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryp…8.2
• CVE-2026-15056The StoreEngine — Complete eCommerce Solution with Membershi…6.5
• CVE-2026-15057IBM WebSphere Application Server - Liberty 17.0.0.3 through …7.5