Vulnerability Description
A weakness has been identified in D-Link DIR-823X 250416. This vulnerability affects the function sub_420688 of the file /goform/set_qos. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dlink | Dir-823X Firmware | 250416 |
| Dlink | Dir-823X | - |
Related Weaknesses (CWE)
References
- https://github.com/master-abc/cve/issues/29ExploitIssue Tracking
- https://vuldb.com/?ctiid.344777Permissions RequiredVDB Entry
- https://vuldb.com/?id.344777Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.747428Third Party AdvisoryVDB Entry
- https://www.dlink.com/Product
FAQ
What is CVE-2026-2142?
CVE-2026-2142 is a vulnerability with a CVSS score of 7.2 (HIGH). A weakness has been identified in D-Link DIR-823X 250416. This vulnerability affects the function sub_420688 of the file /goform/set_qos. Executing a manipulation can lead to os command injection. The...
How severe is CVE-2026-2142?
CVE-2026-2142 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-2142?
Check the references section above for vendor advisories and patch information. Affected products include: Dlink Dir-823X Firmware, Dlink Dir-823X.