CVE-2026-125079 D-Link DCS-6501LH Media Service SystemConfig.ini mydlink_default_sys_info hard-coded credentials

Medium 6.9 Published 10 Nov 2026 Updated 10 Nov 2026

Exploited in the wild: Not known
Fix: None listed

What is CVE-2026-125079?

CVE-2026-125079 is a medium-severity vulnerability in D-Link DCS-6501LH, published on 10 Nov 2026.

Official description

A vulnerability was determined in D-Link DCS-6501LH 3.03.02. This impacts the function pf_get_onvif_user_pwd/mydlink_default_sys_info of the file /mnt/conf/SystemConfig.ini of the component Media Service. This manipulation of the argument pin_code causes hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

Weakness: CWE-798, CWE-259

Which versions are affected by CVE-2026-125079?

How do I fix CVE-2026-125079?

No fix has been published for CVE-2026-125079 yet. Limit exposure of the affected software until one is available.

Is CVE-2026-125079 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-125079 exists.

Sources

Also known as GHSA-cwrm-p6wp-ch6h.