D-Link DI-8200G Command Injection Vulnerability

The D-Link DI-8200G is an enterprise router from China-based AUO D-Link. The D-Link DI-8200G suffers from a command injection vulnerability due to manipulation of a path parameter in an unknown function in the /upgradefilter.asp file. An attacker could exploit this vulnerability to execute...

CVE-2026-0732

A vulnerability was found in D-Link DI-8200G 17.12.20A1. This affects an unknown function of the file /upgradefilter.asp. The manipulation of the argument path results in command injection. The attack may be performed from remote. The exploit has been made public and could be used...

D-Link DI-8200G 命令注入漏洞

The D-Link DI-8200G is an enterprise router from China-based AUO D-Link. The D-Link DI-8200G suffers from a command injection vulnerability due to manipulation of a path parameter in an unknown function in the /upgradefilter.asp file. An attacker could exploit this vulnerability to execute...

CVE-2026-0732: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in D-Link DI-8200G 17.12.20A1. This affects an unknown function of the file /upgradefilter.asp. The manipulation of the argument path results in command injection. The attack may be performed from remote. The exploit has been made public and could be used...

CVE-2026-0732 D-Link DI-8200G upgrade_filter.asp command injection

A vulnerability was found in D-Link DI-8200G 17.12.20A1. This affects an unknown function of the file /upgradefilter.asp. The manipulation of the argument path results in command injection. The attack may be performed from remote. The exploit has been made public and could be used...

PT-2026-1982

Name of the Vulnerable Software and Affected Versions D-Link DI-8200G version 17.12.20A1 Description A flaw exists in D-Link DI-8200G version 17.12.20A1 that allows for command injection. The issue is related to the manipulation of the path argument within an unknown function of the /upgrade...

CVE-2025-10441: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in D-Link DI-8100G, DI-8200G and DI-8003G 17.12.20A1/19.12.10A1. Affected by this issue is the function sub433F7C of the file versionupgrade.asp of the component jhttpd. The manipulation of the argument path results in os command injection. The attack may be launched...

D-Link多款产品 操作系统命令注入漏洞

D-Link DI-8100 and others are products of China AUO D-Link.D-Link DI-8100 is a wireless broadband router designed for small and medium-sized network environments.D-Link DI-8100G is a Gigabit Internet Behavior Management certified router.D-Link DI-8200 is an enterprise-class router. An OS command...

CVE-2025-6899: Improper Neutralization of Special Elements used in an OS Command

A vulnerability, which was classified as critical, was found in D-Link DI-7300G+ and DI-8200G 17.12.20A1/19.12.25A1. This affects an unknown part of the file mspinfo.htm. The manipulation of the argument flag/cmd/iface leads to os command injection. It is possible to initiate the attack remotely...

PT-2025-27427 · D Link · D-Link Di-7300G+ +1

Name of the Vulnerable Software and Affected Versions: D-Link DI-7300G+ versions 17.12.20A1 through 17.12.20A1 D-Link DI-8200G versions 19.12.25A1 through 19.12.25A1 Description: A critical issue was found in the affected devices, affecting an unknown part of the file msp info.htm. The manipulati...