CVE-2026-1125mediumexploração observadaCWE-74CWE-77

CVE-2026-1125: falha de média gravidade em D-Link DIR-823X

D-Link DIR-823X set_wifidog_settings sub_412E7C command injection

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar DIR-823X

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

40Vexday Risk Score

Priorize a correção. Ela exploração observada pelo VulnCheck.

ssvc Attendcvss 6.9epss 16%
da publicação à arma
Publicada no NVD18 de jan.
VulnCheck+165d
A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub_412E7C of the file /goform/set_wifidog_settings. Executing a manipulation of the argument wd_enable can lead to command injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
D-Link · DIR-823X
CVEs relacionadas — D-Link DIR-823X

No mesmo produto, das mais perigosas para as menos.

CVE-2025-1103HIGHD-Link DIR-823X HTTP POST Request set_wifi_blacklists null pointer dereferenceEPSS 14.1%CVE-2026-2142HIGHD-Link DIR-823X set_qos sub_420688 os command injectionEPSS 6.6%CVE-2026-2081MEDIUMD-Link DIR-823X set_password os command injectionEPSS 6.4%CVE-2025-10634MEDIUMD-Link DIR-823X Environment Variable goahead sub_412E7C command injectionEPSS 6.3%CVE-2026-2082MEDIUMD-Link DIR-823X set_mac_clone os command injectionEPSS 5.9%CVE-2026-2063MEDIUMD-Link DIR-823X Web Management set_ac_server os command injectionEPSS 5.3%