CVE-2026-11497

A vulnerability has been found in D-Link DCS-5615 1.01.00. Affected by this vulnerability is an unknown functionality of the file /etc/conf.d/boa/boa.conf of the component Boa Webserver. Such manipulation leads to least privilege violation. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
References
Link Resource
https://vuldb.com/cve/CVE-2026-11497 Third Party Advisory VDB Entry
https://vuldb.com/submit/834823 Third Party Advisory VDB Entry
https://vuldb.com/vuln/369117 Third Party Advisory VDB Entry
https://vuldb.com/vuln/369117/cti Permissions Required VDB Entry
https://www.dlink.com/ Product
https://www.notion.so/D-link-DCS-5615_REV_1-01-00-3670ed14e5cb80e9be78f7d8dbf1e789?source=copy_link Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dlink:dcs-5615_firmware:1.01.00:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dcs-5615:-:*:*:*:*:*:*:*

History

09 Jun 2026, 16:16

Type Values Removed Values Added
CPE cpe:2.3:o:dlink:dcs-5615_firmware:1.01.00:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dcs-5615:-:*:*:*:*:*:*:*
References () https://vuldb.com/cve/CVE-2026-11497 - () https://vuldb.com/cve/CVE-2026-11497 - Third Party Advisory, VDB Entry
References () https://vuldb.com/submit/834823 - () https://vuldb.com/submit/834823 - Third Party Advisory, VDB Entry
References () https://vuldb.com/vuln/369117 - () https://vuldb.com/vuln/369117 - Third Party Advisory, VDB Entry
References () https://vuldb.com/vuln/369117/cti - () https://vuldb.com/vuln/369117/cti - Permissions Required, VDB Entry
References () https://www.dlink.com/ - () https://www.dlink.com/ - Product
References () https://www.notion.so/D-link-DCS-5615_REV_1-01-00-3670ed14e5cb80e9be78f7d8dbf1e789?source=copy_link - () https://www.notion.so/D-link-DCS-5615_REV_1-01-00-3670ed14e5cb80e9be78f7d8dbf1e789?source=copy_link - Vendor Advisory
First Time Dlink dcs-5615 Firmware
Dlink dcs-5615
Dlink

08 Jun 2026, 09:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-06-08 09:16

Updated : 2026-06-09 16:16


NVD link : CVE-2026-11497

Mitre link : CVE-2026-11497

CVE.ORG link : CVE-2026-11497


JSON object : View

Products Affected

dlink

  • dcs-5615
  • dcs-5615_firmware
CWE
CWE-266

Incorrect Privilege Assignment

CWE-272

Least Privilege Violation