CVE-2026-2227: D-Link DCS-931L setSystemAdmin doSystem command injection
A vulnerability was found in D-Link DCS-931L up to 1.13.0. Impacted is the function doSystem of the file /setSystemAdmin. Performing a manipulation of the argument AdminID results in command injection. The attack may be initiated remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2227?
CVE-2026-2227 is classified as a critical command injection vulnerability.
How does CVE-2026-2227 work?
CVE-2026-2227 allows an attacker to execute arbitrary commands on the D-Link DCS-931L by manipulating the AdminID parameter.
How do I fix CVE-2026-2227?
To fix CVE-2026-2227, update your D-Link DCS-931L to the latest firmware version beyond 1.13.0.
Can CVE-2026-2227 be exploited remotely?
Yes, CVE-2026-2227 can be exploited remotely, allowing attackers to execute commands without physical access.
What products are affected by CVE-2026-2227?
CVE-2026-2227 affects the D-Link DCS-931L models running firmware version 1.13.0 or earlier.