OS Command Injection Vulnerability in D-Link DIR-820LW Router
CVE-2026-4499

6.9MEDIUM

Key Information:

Vendor

D-link
Status
Dir-820lw
Vendor
CVE Published:
20 March 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-4499?

The D-Link DIR-820LW 2.03 router has a vulnerability in its SSDP component, specifically in the ssdpcgi_main function. This issue allows for remote OS command injection, providing an attacker the opportunity to manipulate the system through crafted requests. The vulnerability has been publicly disclosed and could potentially be exploited, highlighting the importance of patching affected systems promptly to secure them against unauthorized access.

Affected Version(s)

DIR-820LW 2.03

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-4499 - Proof of Concept

References

https://vuldb.com/?id.352055
vdb-entrytechnical-description
https://vuldb.com/?ctiid.352055
signaturepermissions-required
https://vuldb.com/?submit.773883
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

junqi (VulDB User)
.