CISA Warns of Actively Exploited D-Link Router Vulnerabilities - Patch Now

CISA added two D-Link router vulnerabilities (a CSRF on DIR-600 and an information-disclosure flaw on DIR-605) to its Known Exploited Vulnerabilities list while researchers released a proof-of-concept revealing an HNAP authentication bypass and command injection in DIR-X4860 routers; Ivanti also patched an Ivanti EPMM arbitrary-RPM/update vulnerability (CVE-2024-22026) that can yield local root, plus two SQL injection flaws, with vendors issuing or developing fixes and users urged to update or replace affected devices.