CVE-2026-11492

D-Link DIR-823G vsftpd vsftpd.conf least privilege violation

CVSS 5.3 MEDIUMEPSS 0.5%CWE-266 CWE-272

A security flaw has been discovered in D-Link DIR-823G 1.0.2B05. The affected element is an unknown function of the file /etc/vsftpd.conf of the component vsftpd. Performing a manipulation results in least privilege violation. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

Affected products

D-Link · DIR-823G

public PoCs found — 1

cve_referencewww.notion.so/D-Link-DIR823G-V1-0-2B05_20181207-3671f5ba989080ac97fdc36d2fb5e57d?source=copy_linkunverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://vuldb.com/cve/CVE-2026-11492 https://vuldb.com/submit/834816 https://vuldb.com/vuln/369112 https://vuldb.com/vuln/369112/cti https://www.dlink.com/https://www.notion.so/D-Link-DIR823G-V1-0-2B05_20181207-3671f5ba989080ac97fdc36d2fb5e57d?source=copy_link