CVE-2026-4193: D-Link DIR-823G goahead UpdateClientInfo access control
A security vulnerability has been detected in D-Link DIR-823G 1.0.2B05. The affected element is the function GetDDNSSettings/GetDeviceDomainName/GetDeviceSettings/GetDMZSettings/GetFirewallSettings/GetGuestNetworkSettings/GetLanWanConflictInfo/GetLocalMacAddress/GetNetworkSettings/GetQoSSettings/GetRouterInformationSettings/GetRouterLanSettings/GetWanSettings/SetAccessCtlList/SetAccessCtlSwitch/SetDeviceSettings/SetGuestWLanSettings/SetIPv4FirewallSettings/SetNetworkSettings/SetNetworkTomographySettings/SetNTPServerSettings/SetRouterLanSettings/SetStaticClientInfo/SetStaticRouteSettings/SetWLanRadioSecurity/SetWPSSettings/UpdateClientInfo of the component goahead. Such manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4193?
CVE-2026-4193 is considered a medium severity vulnerability due to improper access controls in the D-Link DIR-823G.
How do I fix CVE-2026-4193?
To resolve CVE-2026-4193, update the D-Link DIR-823G to the latest firmware version provided by the manufacturer.
What are the affected versions of CVE-2026-4193?
CVE-2026-4193 specifically affects D-Link DIR-823G firmware version 1.0.2B05.
What access controls are impacted by CVE-2026-4193?
CVE-2026-4193 affects access controls related to various device settings, including DDNS and firewall configurations.
Is there a workaround for CVE-2026-4193?
A potential workaround for CVE-2026-4193 is to limit access to the device's management interface through network restrictions.