CVE-2014-10027: Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP-1360 router with firmware 2.5.4 an...

Security readout for executives and security teams

This CVE describes CSRF flaws in the D-Link DAP-1360 router. If an administrator is already logged in, a malicious site could cause their browser to change MAC filtering settings without consent. That can weaken network access controls, but the sources do not provide CVSS scoring, patch status, or active exploitation evidence. Exposure is most likely where D-Link DAP-1360 devices running firmware 2.5.4 or earlier remain deployed and administrators access the web management interface from browsers that can reach untrusted content. Treat this as a legacy network-device hygiene issue. It is not confirmed as actively exploited, but affected routers can have access controls changed through administrator browser abuse. Prioritize discovery and replacement planning if these devices remain in production. Mitigation focus: Check D-Link support guidance for firmware or end-of-life status.; Replace affected devices if no supported firmware is available.; Restrict router administration to trusted management networks where possible..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.