D-Link DIR-823X Vulnerability
D-Link DIR-823X contains a command injection vulnerability that allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
CVSS Score
9.8
CRITICAL
Published
24 Apr 2026 00:00
Modified
N/A
Vendor
D-Link
Product
DIR-823X
Source
CIRCL
Affected Versions
Fix
Vendor Patch / Mitigation Available
Weaknesses (CWE)
CWE-77
Affected Systems
D-Link
DIR-823X
D-Link
DIR-823X
External Links
KEV Status
Known Exploited Vulnerability