PT-2026-5227 · D Link · Dir-823

Jiefengliang · Publicado 2026-01-14 · Atualizado 2026-02-09 · CVE-2026-1544

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X version 250416

Description A security flaw exists in D-Link DIR-823X version 250416. The issue is related to the sub 41E2A0 function within the /goform/set mode file. Manipulation of the lan gateway argument can lead to operating system command injection. This attack is possible remotely. The exploit has been publicly released. This vulnerability affects products that are no longer supported by the maintainer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

OS Command Injection

Enumeração de Fraquezas

CWE-77

CWE-78

Identificadores relacionados

BDU:2026-00936

CVE-2026-1544

Produtos afetados

Dir-823

Referências · 11

• 🔥 https://github.com/master-abc/cve/issues/16 · Exploit
• https://bdu.fstec.ru/vul/2026-00936 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-1544 · Aviso do Fabricante
• https://dlink.com · Nota
• https://vuldb.com/?ctiid.343228 · Nota
• https://twitter.com/CVEnew/status/2016631016291778933 · Publicação no Twitter
• https://vuldb.com/?id.343228 · Nota
• https://t.me/CVEtracker/43200 · Publicação no Telegram
• https://vuldb.com/?submit.739155 · Nota
• https://t.me/cveNotify/151449 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-1544 · Nota de Segurança