Unrated severityNVD Advisory· Published Feb 8, 2026· Updated Feb 23, 2026
D-Link DIR-823X Configuration set_dmz sub_4208A0 os command injection
CVE-2026-2155
Description
A security flaw has been discovered in D-Link DIR-823X 250416. The affected element is the function sub_4208A0 of the file /goform/set_dmz of the component Configuration Handler. The manipulation of the argument dmz_host/dmz_enable results in os command injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
6- github.com/master-abc/cve/issues/32mitreexploitissue-tracking
- vuldb.commitrethird-party-advisory
- vuldb.commitrethird-party-advisory
- vuldb.commitresignaturepermissions-required
- vuldb.commitrevdb-entrytechnical-description
- www.dlink.commitreproduct
News mentions
0No linked articles in our index yet.