Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-101625. PoCs published by Ajay S. Kulal.
AI-analyzed exploit summary The exploit demonstrates a CSRF vulnerability in D-Link DIR-600M routers, allowing an attacker to add a new admin user or change Wi-Fi settings via crafted HTML forms. The PoC includes functional code that submits malicious requests to the router's configuration endpoints.
Description
D-Link DIR-600M - Cross-Site Request Forgery
Exploits (1)
exploitdb
WORKING POC
by Ajay S. Kulal · htmlwebappshardware
https://www.exploit-db.com/exploits/41299
The exploit demonstrates a CSRF vulnerability in D-Link DIR-600M routers, allowing an attacker to add a new admin user or change Wi-Fi settings via crafted HTML forms. The PoC includes functional code that submits malicious requests to the router's configuration endpoints.
Classification
Working Poc 100%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target:
D-Link DIR-600M (Hardware C1, Firmware 3.03)
No auth needed
Prerequisites:
Victim must be authenticated to the router's admin interface · Victim must visit a malicious webpage hosting the CSRF PoC
MITRE ATT&CK
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026