Important Security Update for D-Link Routers
Summary: D-Link released firmware updates on Nov. 28 for several older router models to close a backdoor that let an attacker log in as administrator without authentication by setting the browser's user agent string to "xmlset_roodkcableoj28840ybtide". Researcher Craig Heffner discovered and blogged about the flaw roughly seven weeks earlier, and later posted a proof-of-concept showing attackers could also upload arbitrary code to the vulnerable devices.
What's compelling: The affected routers are old set-it-and-forget-it devices that rarely get replaced or updated, and the flaw was rated 10.0 (HIGH) on the NVD and noted as exploited in the wild in October 2013 - so the population of unpatched units is the exposure, not the patch itself.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026