CVE-2023-36091

Summary

CVE-2023-36091 is an Authentication Bypass vulnerability affecting the D-Link DIR-895 router with firmware version FW102b07. This issue allows remote attackers to bypass authentication and gain escalated privileges by exploiting a function named phpcgi_main in the cgibin directory. It is important to note that this vulnerability only impacts unsupported D-Link products, and users are urged to update to a secured version or replace their devices.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.