PT-2026-6943 · D Link · D-Link Dir-823G

Jiefengliang · Publicado 2026-01-24 · Atualizado 2026-02-13 · CVE-2026-2129

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X version 250416

Description A flaw exists in D-Link DIR-823X version 250416 related to the processing of input for the file /goform/set ac status. Manipulation of the ac ipaddr, ac ipstatus, and ap randtime arguments can lead to os command injection. This issue can be exploited remotely. The exploit has been publicly released.

Recommendations Apply any available updates to address the vulnerability in the affected file /goform/set ac status. As a temporary workaround, restrict access to the /goform/set ac status file to minimize the risk of exploitation. Avoid manipulating the ac ipaddr, ac ipstatus, and ap randtime arguments.

Exploit

Correção

OS Command Injection

Command Injection

Enumeração de Fraquezas

CWE-78

CWE-77

Identificadores relacionados

BDU:2026-02472

CVE-2026-2129

Produtos afetados

D-Link Dir-823G

Referências · 13

• 🔥 https://github.com/master-abc/cve/issues/23 · Exploit
• https://twitter.com/RedPacketSec/status/2020374793413894242 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2020356546157256932 · Publicação no Twitter
• https://t.me/CVEtracker/44074 · Publicação no Telegram
• https://dlink.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-2129 · Nota de Segurança
• https://vuldb.com/?ctiid.344764 · Nota
• https://twitter.com/cracbot/status/2022264545046339958 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-2129 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2026-02472 · Nota de Segurança
• https://t.me/cveNotify/151274 · Publicação no Telegram
• https://vuldb.com/?submit.746935 · Nota
• https://vuldb.com/?id.344764 · Nota