Search/CVE-2026-4377
● CVE

CVE-2026-4377

DiscoveredMay 28, 2026UpdatedMay 28, 2026

Dlink DWR-X1820 router uses weak default password generated from its IMEI number and does not require users to change it. An attacker who knows how passwords are generated can easily crack the default password if they have the device IMEI number. This issue was fixed in version 1.00B16CP.

CVSS v3.1
—
EPSS
0.20%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
1 relationships
Timeline
disclosure → media coverage
May 28, 2026
Disclosure — published as a CVE record.