The vulnerability of the function in the /goform/set_password file of D-link DIR-823X router microprogramming software allows a hacker to execute any command they desire.

The vulnerability of the /goform/setpassword function in the D-link DIR-823X router microprogramming system is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2026-2081

CVE-2026-2081 affects D-Link DIR-823X (build 250416). Affected component is an unknown function in /goform/set_password where manipulating the http_passwd argument causes OS command injection. The vulnerability is exploitable remotely and exploitation has been publicly disclosed. Documentation in...