PT-2026-6775 · D Link · D-Link Dir-823G

Jiefengliang · Publicado 2026-01-22 · Atualizado 2026-02-06 · CVE-2026-2063

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X version 250416

Description A security flaw exists in the D-Link DIR-823X version 250416. The issue is located in the Web Management Interface, specifically within the file /goform/set ac server. Manipulation of the ac server argument can lead to os command injection. This attack can be initiated remotely. The exploit for this issue has been publicly released.

Recommendations Apply updates to address the vulnerability in the Web Management Interface. Restrict access to the /goform/set ac server file. As a temporary workaround, consider disabling the Web Management Interface until a patch is available.

Exploit

Correção

Command Injection

OS Command Injection

Enumeração de Fraquezas

CWE-77

CWE-78

Identificadores relacionados

BDU:2026-02160

CVE-2026-2063

Produtos afetados

D-Link Dir-823G

Referências · 10

• 🔥 https://github.com/master-abc/cve/issues/19 · Exploit
• https://osv.dev/vulnerability/CVE-2026-2063 · Aviso do Fabricante
• https://vuldb.com/?ctiid.344623 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-2063 · Nota de Segurança
• https://twitter.com/CVEnew/status/2019857595830272457 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2026-02160 · Nota de Segurança
• https://t.me/CVEtracker/43952 · Publicação no Telegram
• https://dlink.com · Nota
• https://vuldb.com/?submit.744720 · Nota
• https://vuldb.com/?id.344623 · Nota