CVE-2026-52356
An OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1_FW101WWb04 allows attackers to execut
CVSS
—
No CVSS
EPSS
1.0%
p63
KEV
—
Exploit Today
19
0-100
Published: Oct 23, 2026 · Last modified: Oct 23, 2026
Not enough EPSS history yet.
An OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1_FW101WWb04 allows attackers to execute arbitrary commands via injecting arbitrary shell metacharacters.
No related CVEs by CWE or product.