Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-101226. PoCs published by Samuel Huntley.
AI-analyzed exploit summary The exploit demonstrates a command injection vulnerability in the DIR-601 router's ping functionality via a crafted HTTP POST request to /my_cgi.cgi. The payload injects commands into the admin3_user_name parameter, allowing arbitrary command execution.
Description
D-Link DIR-601 - Command Injection
Exploits (1)
exploitdb
WORKING POC
by Samuel Huntley · textremotehardware
https://www.exploit-db.com/exploits/38724
The exploit demonstrates a command injection vulnerability in the DIR-601 router's ping functionality via a crafted HTTP POST request to /my_cgi.cgi. The payload injects commands into the admin3_user_name parameter, allowing arbitrary command execution.
Classification
Working Poc 95%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target:
D-Link DIR-601 Wireless N150 Home Router
Auth required
Prerequisites:
Authenticated session on the router · Network access to the router's management interface
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026