CVE-2018-9032

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 27.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-03-27 · updated 2026-06-17
Weakness: CWE-287

Description

An authentication bypass vulnerability on D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router (Hardware Version : A1, B1; Firmware Version : 1.02-2.06) devices potentially allows attackers to bypass SharePort Web Access Portal by directly visiting /category_view.php or /folder_view.php.

Affected products

D-Link DIR-850L and potentially others: from 1.02 through 2.06

References

https://www.exploit-db.com/exploits/44378/
https://www.youtube.com/watch?v=Wmm4p8znS3s
https://www.exploit-db.com/exploits/44378/
https://www.youtube.com/watch?v=Wmm4p8znS3s

Get alerted when CVE-2018-9032 or the next vulnerability affects your stack