VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 10, 2026· Updated Feb 23, 2026

D-Link DCS-931L setSysAdmin os command injection

CVE-2026-2260

Description

A vulnerability was found in D-Link DCS-931L up to 1.13.0. This affects an unknown part of the file /goform/setSysAdmin. The manipulation of the argument AdminID results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Dlink/DCS-931Lllm-create2 versions
    <=1.13.0+ 1 more
    • (no CPE)range: <=1.13.0
    • (no CPE)range: 1.0

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.