CVE-2026-1125mediumexplotación observadaCWE-74CWE-77

CVE-2026-1125: fallo de gravedad media en D-Link DIR-823X

D-Link DIR-823X set_wifidog_settings sub_412E7C command injection

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear DIR-823X

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

40Vexday Risk Score

Prioriza la corrección. Ella explotación observada por VulnCheck.

ssvc Attendcvss 6.9epss 16%
de la publicación al arma
Publicada en NVD18 ene
VulnCheck+165d
A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub_412E7C of the file /goform/set_wifidog_settings. Executing a manipulation of the argument wd_enable can lead to command injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
D-Link · DIR-823X
CVEs relacionadas — D-Link DIR-823X

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-1103HIGHD-Link DIR-823X HTTP POST Request set_wifi_blacklists null pointer dereferenceEPSS 14.1%CVE-2026-2142HIGHD-Link DIR-823X set_qos sub_420688 os command injectionEPSS 6.6%CVE-2026-2081MEDIUMD-Link DIR-823X set_password os command injectionEPSS 6.4%CVE-2025-10634MEDIUMD-Link DIR-823X Environment Variable goahead sub_412E7C command injectionEPSS 6.3%CVE-2026-2082MEDIUMD-Link DIR-823X set_mac_clone os command injectionEPSS 5.9%CVE-2026-2063MEDIUMD-Link DIR-823X Web Management set_ac_server os command injectionEPSS 5.3%