DeutschShown in its original language — a full translation is planned for a future version.
D-LINK DIR-823X und DWR-M921 Router: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administratorrechten
view advisory published 2026-02-08
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in D-LINK Router ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen.
01
describes (14)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-2210US | — | — | ||
A vulnerability has been found in D-Link DIR-823X 250416. This affects the function sub_4211C8 of the file /goform/set_filtering. Such manipulation leads to os command injection. T… | ||||
| CVE-2026-2175US | — | — | ||
A weakness has been identified in D-Link DIR-823X 250416. This vulnerability affects the function sub_420618 of the file /goform/set_upnp. This manipulation of the argument upnp_en… | ||||
| CVE-2026-2157US | — | — | ||
A security vulnerability has been detected in D-Link DIR-823X 250416. This affects the function sub_4175CC of the file /goform/set_static_route_table. Such manipulation of the argu… | ||||
| CVE-2026-2155US | — | — | ||
A security flaw has been discovered in D-Link DIR-823X 250416. The affected element is the function sub_4208A0 of the file /goform/set_dmz of the component Configuration Handler. T… | ||||
| CVE-2026-2143US | — | — | ||
A security vulnerability has been detected in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/set_ddns of the component DDNS Service. The man… | ||||
| CVE-2026-2142US | — | — | ||
A weakness has been identified in D-Link DIR-823X 250416. This vulnerability affects the function sub_420688 of the file /goform/set_qos. Executing a manipulation can lead to os co… | ||||
| CVE-2026-2129US | — | — | ||
A vulnerability was found in D-Link DIR-823X 250416. Affected by this issue is some unknown functionality of the file /goform/set_ac_status. Performing a manipulation of the argume… | ||||
| CVE-2026-2120US | — | — | ||
A vulnerability was identified in D-Link DIR-823X 250416. This affects an unknown function of the file /goform/set_server_settings of the component Configuration Parameter Handler.… | ||||
| CVE-2026-2085US | — | — | ||
A security vulnerability has been detected in D-Link DWR-M921 1.1.50. Affected is the function sub_419F20 of the file /boafrm/formUSSDSetup of the component USSD Configuration Endp… | ||||
| CVE-2026-2084US | — | — | ||
A weakness has been identified in D-Link DIR-823X 250416. This impacts an unknown function of the file /goform/set_language. Executing a manipulation of the argument langSelection… | ||||
| CVE-2026-2082US | high7.2 | — | ||
A vulnerability was identified in D-Link DIR-823X 250416. The impacted element is an unknown function of the file /goform/set_mac_clone. Such manipulation of the argument mac leads… | ||||
| CVE-2026-2081US | high7.2 | — | ||
A vulnerability was determined in D-Link DIR-823X 250416. The affected element is an unknown function of the file /goform/set_password. This manipulation of the argument http_passw… | ||||
| CVE-2026-2063US | high7.2 | — | ||
A security flaw has been discovered in D-Link DIR-823X 250416. This vulnerability affects unknown code of the file /goform/set_ac_server of the component Web Management Interface.… | ||||
| CVE-2026-2061US | high7.2 | — | ||
A vulnerability was determined in D-Link DIR-823X 250416. Affected by this issue is the function sub_424D20 of the file /goform/set_ipv6. Executing a manipulation can lead to os co… | ||||
02
references
External citations — patches, advisories, analysis.
- EU Vulnerability Database vom 2026-02-08external
- EU Vulnerability Database vom 2026-02-08external
- EU Vulnerability Database vom 2026-02-08external
- EU Vulnerability Database vom 2026-02-08external
- EU Vulnerability Database vom 2026-02-08external
- EU Vulnerability Database vom 2026-02-08external
- EU Vulnerability Database vom 2026-02-08external
- EU Vulnerability Database vom 2026-02-08external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan