CVE-2026-2084: D-Link DIR-823X set_language os command injection
A weakness has been identified in D-Link DIR-823X 250416. This impacts an unknown function of the file /goform/setlanguage. Executing a manipulation of the argument langSelection can lead to os command injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2084?
CVE-2026-2084 is classified as a high severity vulnerability due to its potential for os command injection.
How do I fix CVE-2026-2084?
To fix CVE-2026-2084, ensure to update the D-Link DIR-823X firmware to the latest version provided by D-Link.
What type of vulnerability is CVE-2026-2084?
CVE-2026-2084 is an os command injection vulnerability, which allows attackers to execute arbitrary commands on the affected system.
Which product is affected by CVE-2026-2084?
CVE-2026-2084 affects the D-Link DIR-823X router specifically.
What action can be taken to mitigate CVE-2026-2084?
To mitigate CVE-2026-2084, restrict access to the router's management interface and implement additional network security measures.