CVE-2026-4499: D-Link DIR-820LW SSDP ssdpcgi_main os command injection

Published Mar 20, 2026

Updated

A vulnerability was determined in D-Link DIR-820LW 2.03. Affected is the function ssdpcgimain of the component SSDP. Executing a manipulation can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

Affected Software

3 affected components

D-Link DIR-820LW=2.03

All of the following

Dlink Dir-820lw Firmware=2.03

Dlink Dir-820lw

Event History

Mar 20, 2026

CVE Published

via MITRE·07:32 PM

Data Sourced

via MITRE·07:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:16 PM

DescriptionSeverityWeaknessAffected Software

May 13, 58227

Event

via FIRST·07:12 AM

Frequently Asked Questions

What is the severity of CVE-2026-4499?

CVE-2026-4499 is classified as a critical vulnerability due to its potential for remote exploitation via os command injection.

How do I fix CVE-2026-4499?

To mitigate CVE-2026-4499, update the D-Link DIR-820LW firmware to the latest version that addresses this vulnerability.

What component is affected by CVE-2026-4499?

CVE-2026-4499 affects the ssdpcgi_main function of the SSDP component in the D-Link DIR-820LW.

Can CVE-2026-4499 be exploited remotely?

Yes, CVE-2026-4499 can be exploited remotely, allowing attackers to execute arbitrary commands on the affected device.

Which version of D-Link DIR-820LW is impacted by CVE-2026-4499?

CVE-2026-4499 impacts D-Link DIR-820LW version 2.03.