{"id":"CVE-2026-125079","published":"2026-11-10T01:17:19.193","lastModified":"2026-11-10T17:17:25.703","description":"A vulnerability was determined in D-Link DCS-6501LH 3.03.02. This impacts the function pf_get_onvif_user_pwd/mydlink_default_sys_info of the file /mnt/conf/SystemConfig.ini of the component Media Service. This manipulation of the argument pin_code causes hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.","cvssScore":5.3,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwes":["CWE-259","CWE-798"],"vendors":[],"products":[],"references":[{"url":"https://github.com/XueDugu/dlink-dcs6501lh-media-service-credential-evidence","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-125079","tags":[]},{"url":"https://vuldb.com/submit/1041047","tags":[]},{"url":"https://vuldb.com/vuln/433190","tags":[]},{"url":"https://vuldb.com/vuln/433190/cti","tags":[]},{"url":"https://www.dlink.com/","tags":[]}],"exploitRefs":[{"url":"https://github.com/XueDugu/dlink-dcs6501lh-media-service-credential-evidence","tags":[]}],"hasPoc":true,"ai":null}