PT-2026-6988 · D Link · Dir-823

Jiefengliang · Publicado 2026-01-27 · Atualizado 2026-02-08 · CVE-2026-2157

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X version 250416

Description A security issue exists in D-Link DIR-823X version 250416. The sub 4175CC function within the /goform/set static route table file is susceptible to OS command injection. Manipulation of the interface, destip, netmask, gateway, and metric arguments can lead to unauthorized command execution. This can be exploited remotely. The exploit has been publicly disclosed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Command Injection

Enumeração de Fraquezas

CWE-78

CWE-77

Identificadores relacionados

BDU:2026-02470

CVE-2026-2157

Produtos afetados

Dir-823

Referências · 11

• 🔥 https://github.com/master-abc/cve/issues/28 · Exploit
• https://vuldb.com/?id.344859 · Nota
• https://vuldb.com/?submit.748376 · Nota
• https://t.me/cveNotify/151303 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2026-02470 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2026-2157 · Nota de Segurança
• https://dlink.com · Nota
• https://t.me/CVEtracker/44106 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2020518487530041586 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-2157 · Aviso do Fabricante
• https://vuldb.com/?ctiid.344859 · Nota