OS Command Injection in D-Link DIR-823X Router
CVE-2026-1544
Key Information:
Badges
What is CVE-2026-1544?
A security vulnerability has been identified in the D-Link DIR-823X 250416 router. Specifically, a flaw exists in the sub_41E2A0 function of the /goform/set_mode file. By manipulating the lan_gateway argument, an attacker can execute arbitrary OS commands. This attack can be executed remotely and poses a significant risk, especially for devices that are no longer maintained by the vendor. As the exploit is publicly known, immediate action is recommended for users of the affected product to mitigate potential risks.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
DIR-823X 250416
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V4
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved