CVE-2026-2081: D-Link DIR-823X set_password os command injection
A vulnerability was determined in D-Link DIR-823X 250416. The affected element is an unknown function of the file /goform/setpassword. This manipulation of the argument httppasswd causes os command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2081?
CVE-2026-2081 has a high severity rating due to its potential for os command injection.
How do I fix CVE-2026-2081?
To fix CVE-2026-2081, users should update the firmware of the D-Link DIR-823X to the latest version provided by the vendor.
What are the potential impacts of CVE-2026-2081?
The potential impacts of CVE-2026-2081 include unauthorized access to the system and the ability to execute arbitrary commands.
Which devices are affected by CVE-2026-2081?
CVE-2026-2081 specifically affects the D-Link DIR-823X router model.
How can CVE-2026-2081 be exploited?
CVE-2026-2081 can be exploited through crafted HTTP requests that manipulate the http_passwd argument in the /goform/set_password function.