QwikSec

Security Database

CVE

CWE

Training

CVE-2026-4377

Published: May 28, 2026

Modified: May 28, 2026

PUBLISHED

Description

Dlink DWR-X1820 router uses weak default password generated from its IMEI number and does not require users to change it. An attacker who knows how passwords are generated can easily crack the default password if they have the device IMEI number. This issue was fixed in version 1.00B16CP.

Vendor	Product	Versions
D-Link Corporation	DWR-X1820	affected `1.00B14CP - < 1.00B16CP`

Weaknesses (CWE)

References

https://cert.pl/posts/2026/05/CVE-2026-4377

third-party-advisory

https://www.dlink.com/pl/pl/products/dwr-1820-cp#support

product

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.