Vulnerability Description
A security flaw has been discovered in D-Link DIR-823X 250416. The affected element is the function sub_4208A0 of the file /goform/set_dmz of the component Configuration Handler. The manipulation of the argument dmz_host/dmz_enable results in os command injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dlink | Dir-823X Firmware | 250416 |
| Dlink | Dir-823X | - |
Related Weaknesses (CWE)
References
- https://github.com/master-abc/cve/issues/32ExploitIssue Tracking
- https://vuldb.com/?ctiid.344857Permissions RequiredVDB Entry
- https://vuldb.com/?id.344857Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.748236Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.750038Third Party AdvisoryVDB Entry
- https://www.dlink.com/Product
FAQ
What is CVE-2026-2155?
CVE-2026-2155 is a vulnerability with a CVSS score of 7.2 (HIGH). A security flaw has been discovered in D-Link DIR-823X 250416. The affected element is the function sub_4208A0 of the file /goform/set_dmz of the component Configuration Handler. The manipulation of t...
How severe is CVE-2026-2155?
CVE-2026-2155 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-2155?
Check the references section above for vendor advisories and patch information. Affected products include: Dlink Dir-823X Firmware, Dlink Dir-823X.