CVE-2013-6026: The web interface on D-Link DIR-100, DIR-120, DI-624S, DI-524UP, DI-604S, DI-604UP, DI-604+, and TM-G5240 r...

Security readout for executives and security teams

This is an old but serious router backdoor issue. Certain D-Link, Planex, and Alpha Networks routers could let a remote attacker bypass the web-admin login and change settings. The CVE states it was exploited in the wild in October 2013, but the supplied sources do not prove current active exploitation. Exposure is most likely where affected legacy routers remain deployed, especially with web administration reachable from the internet or untrusted networks. The affected list includes multiple D-Link DIR/DI/TM models, Planex BRL models, and Alpha Networks routers. Prioritize remediation if any affected router remains in production. These are legacy edge devices, and an authentication bypass on network infrastructure can create broad business risk even without a modern CVSS score. Mitigation focus: Identify and replace affected legacy router models where feasible.; Check D-Link, Planex, and Alpha Networks guidance for firmware or retirement direction.; Disable remote web administration on affected devices where available..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.