CVE-2026-2061

2.0 lowEPSS 5.1%

Low (2.0) in dlink dir-823x firmware. EPSS 5.1% chance of exploitation in the next 30 days.

A vulnerability was determined in D-Link DIR-823X 250416. Affected by this issue is the function sub_424D20 of the file /goform/set_ipv6. Executing a manipulation can lead to os command injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.

Severity

CVSS 4.0

2.0 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 5.1% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWEs: CWE-78, CWE-77
Published: 2026-02-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dlink:dir-823x_firmware

References

https://github.com/master-abc/cve/issues/20
https://vuldb.com/?ctiid.344621
https://vuldb.com/?id.344621
https://vuldb.com/?submit.744286
https://www.dlink.com/

Check your stack JSON