Deviceways

Router

D-Link DIR-X1860

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

HardwareB1

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
B1
Release listed · 25.12.6
Get OpenWrt firmwarefirmware-selector.openwrt.org
Original project github.com

B1

First installation
GUI generic
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

D-Link DIR-X1860 rev A1 — TechInfoDepot (github.com)

Hardware revision
rev A1

Device details

Device details — Source documentation (openwrt.org)

Hardware revision
B1

OpenWrt · B1

OpenWrt · B1 — Source documentation (openwrt.org)

Installation routes recorded
GUI generic
Availability recorded by source
Discontinued

Hardware differences

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

CVSS 8.7 (v4.0)

DIR-X1860

D-Link DIR-X1860/DIR-X1860Z routerd ubus access control

CVE-2026-94036

Affected firmware
1.0.2.220120.165402
Fix
The similarly named DIR-X1860, all hardware revisions, has reached End of Life ("EOL") / End of Service Life ("EOS").
Read VulDB CVE record
Details and sourcesManufacturer fix — DIR-X1860 ↗
CVE updated

A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwd_set results in improper access controls. The attack must originate from the local network. The exploit has been released to the public and may be used for attacks.

VDB-407965 | D-Link DIR-X1860/DIR-X1860Z routerd ubus access control — DIR-X1860 (vuldb.com) ↗VDB-407965 | CTI Indicators (IOB, IOC, TTP, IOA) — DIR-X1860 (vuldb.com) ↗CVE-2026-94036 | CVE Analysis and Report — DIR-X1860 (vuldb.com) ↗Submit #947565 | D-Link DIR-X1860Z 1.0.2.220120.165402 Improper Access Controls — DIR-X1860 (vuldb.com) ↗
CVE published

CVSS 5.3 (v3.1)

DIR-X1860

D-Link Good Line Router v2 HTTP GET Request devinfo information disclosure

CVE-2024-0717

Affected firmware
20240112
Fix
Fix details in the linked record
Read VulDB CVE record
Details and sources
CVE updated

A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, DIR-842, DIR-842S, DIR-843, DIR-853, DIR-878, DIR-882, DIR-1210, DIR-1260, DIR-2150, DIR-X1530, DIR-X1860, DSL-224, DSL-245GR, DSL-2640U, DSL-2750U, DSL-G2452GR, DVG-5402G, DVG-5402G, DVG-5402GFRU, DVG-N5402G, DVG-N5402G-IL, DWM-312W, DWM-321, DWR-921, DWR-953 and Good Line Router v2 up to 20240112. This vulnerability affects unknown code of the file /devinfo of the component HTTP GET Request Handler. The manipulation of the argument area with the input notice|net|version leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251542 is the identifier assigned to this vulnerability.

CVE published

D-Link DIR-X1860

An information disclosure in web interface in D-Link DIR-X1860 before 1.03 RevA1 allows a remote unauthenticated attacker to send a specially crafted HTTP request and gain knowledge of…

CVE-2021-46353

Affected firmware
DIR-X1860: before 1.03 RevA1
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

An information disclosure in web interface in D-Link DIR-X1860 before 1.03 RevA1 allows a remote unauthenticated attacker to send a specially crafted HTTP request and gain knowledge of different absolute paths that are being used by the web application.

CVE published

D-Link DIR-X1860

A reflected cross-site-scripting attack in web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to execute code in the device of the victim…

CVE-2021-41445

Affected firmware
DIR-X1860: before v1.10WWB09_Beta
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

A reflected cross-site-scripting attack in web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to execute code in the device of the victim via sending a specific URL to the unauthenticated victim.

CVE published

D-Link DIR-X1860

An HTTP smuggling attack in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to DoS the web application via sending a specific HTTP…

CVE-2021-41442

Affected firmware
DIR-X1860: before v1.10WWB09_Beta
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

An HTTP smuggling attack in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to DoS the web application via sending a specific HTTP packet.

Check more security advisories for this device · CVE.org