DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
D-LINK DIR-823X und DWR-M921 Router: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administratorrechten
Advisory ansehen veröffentlicht 2026-02-08
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in D-LINK Router ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen.
01
beschreibt (14)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-2210US | — | — | ||
A vulnerability has been found in D-Link DIR-823X 250416. This affects the function sub_4211C8 of the file /goform/set_filtering. Such manipulation leads to os command injection. T… | ||||
| CVE-2026-2175US | — | — | ||
A weakness has been identified in D-Link DIR-823X 250416. This vulnerability affects the function sub_420618 of the file /goform/set_upnp. This manipulation of the argument upnp_en… | ||||
| CVE-2026-2157US | — | — | ||
A security vulnerability has been detected in D-Link DIR-823X 250416. This affects the function sub_4175CC of the file /goform/set_static_route_table. Such manipulation of the argu… | ||||
| CVE-2026-2155US | — | — | ||
A security flaw has been discovered in D-Link DIR-823X 250416. The affected element is the function sub_4208A0 of the file /goform/set_dmz of the component Configuration Handler. T… | ||||
| CVE-2026-2143US | — | — | ||
A security vulnerability has been detected in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/set_ddns of the component DDNS Service. The man… | ||||
| CVE-2026-2142US | — | — | ||
A weakness has been identified in D-Link DIR-823X 250416. This vulnerability affects the function sub_420688 of the file /goform/set_qos. Executing a manipulation can lead to os co… | ||||
| CVE-2026-2129US | — | — | ||
A vulnerability was found in D-Link DIR-823X 250416. Affected by this issue is some unknown functionality of the file /goform/set_ac_status. Performing a manipulation of the argume… | ||||
| CVE-2026-2120US | — | — | ||
A vulnerability was identified in D-Link DIR-823X 250416. This affects an unknown function of the file /goform/set_server_settings of the component Configuration Parameter Handler.… | ||||
| CVE-2026-2085US | — | — | ||
A security vulnerability has been detected in D-Link DWR-M921 1.1.50. Affected is the function sub_419F20 of the file /boafrm/formUSSDSetup of the component USSD Configuration Endp… | ||||
| CVE-2026-2084US | — | — | ||
A weakness has been identified in D-Link DIR-823X 250416. This impacts an unknown function of the file /goform/set_language. Executing a manipulation of the argument langSelection… | ||||
| CVE-2026-2082US | high7.2 | — | ||
A vulnerability was identified in D-Link DIR-823X 250416. The impacted element is an unknown function of the file /goform/set_mac_clone. Such manipulation of the argument mac leads… | ||||
| CVE-2026-2081US | high7.2 | — | ||
A vulnerability was determined in D-Link DIR-823X 250416. The affected element is an unknown function of the file /goform/set_password. This manipulation of the argument http_passw… | ||||
| CVE-2026-2063US | high7.2 | — | ||
A security flaw has been discovered in D-Link DIR-823X 250416. This vulnerability affects unknown code of the file /goform/set_ac_server of the component Web Management Interface.… | ||||
| CVE-2026-2061US | high7.2 | — | ||
A vulnerability was determined in D-Link DIR-823X 250416. Affected by this issue is the function sub_424D20 of the file /goform/set_ipv6. Executing a manipulation can lead to os co… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- EU Vulnerability Database vom 2026-02-08external
- EU Vulnerability Database vom 2026-02-08external
- EU Vulnerability Database vom 2026-02-08external
- EU Vulnerability Database vom 2026-02-08external
- EU Vulnerability Database vom 2026-02-08external
- EU Vulnerability Database vom 2026-02-08external
- EU Vulnerability Database vom 2026-02-08external
- EU Vulnerability Database vom 2026-02-08external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan