Medium severity5.3NVD Advisory· Published Nov 10, 2026· Updated Nov 10, 2026

CVE-2026-125079

Description

A vulnerability was determined in D-Link DCS-6501LH 3.03.02. This impacts the function pf_get_onvif_user_pwd/mydlink_default_sys_info of the file /mnt/conf/SystemConfig.ini of the component Media Service. This manipulation of the argument pin_code causes hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dlink/DCS-6501LHllm-create
Range: = 3.03.02
XueDugu/dlink-dcs6501lh-media-service-credential-evidencellm-create
Range: = 3.03.02

Patches

Vulnerability mechanics

References

vuldb.com/cve/CVE-2026-125079nvd
vuldb.com/submit/1041047nvd
vuldb.com/vuln/433190nvd
vuldb.com/vuln/433190/ctinvd
www.dlink.comnvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000