CVE-2026-2175: D-Link DIR-823X set_upnp sub_420618 os command injection
A weakness has been identified in D-Link DIR-823X 250416. This vulnerability affects the function sub420618 of the file /goform/setupnp. This manipulation of the argument upnpenable causes os command injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2175?
CVE-2026-2175 is classified as a high-severity vulnerability due to its potential for remote exploitation.
How do I fix CVE-2026-2175?
To mitigate CVE-2026-2175, users should update the firmware of the D-Link DIR-823X to the latest version provided by the manufacturer.
What specifically does CVE-2026-2175 affect?
CVE-2026-2175 affects the set_upnp function in the D-Link DIR-823X router, where os command injection can occur.
Can CVE-2026-2175 be exploited remotely?
Yes, CVE-2026-2175 can be exploited remotely due to improper handling of user input in the vulnerable function.
What are the consequences of CVE-2026-2175 exploitation?
Exploitation of CVE-2026-2175 may allow an attacker to execute arbitrary commands on the affected D-Link DIR-823X router.