udhcpd Router Command Execution

The vulnerability of the udhcpd microprogramming software for D-Link DIR-860LB1 and DIR-868LB1 routers lies in the lack of measures to neutralize special elements in the output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Exploit for Injection in Dlink Dir-868L_B1_Firmware

CVE-2025-14659: D-Link DHCP Hostname Command Injection An Off...

Vulnerability-DLink-CVE-2025-14659

CVE-2025-14659 : Analyse de l'injection de commandes dans le démon DHCP de D-Link Projet Recreate CVE | Sécurité Offensive Auteur : Peter Lin Date : Mai 2026 Présentation du projet : CVE-2025-14659 a signalé une vulnérabilité d'injection de commandes ciblant le composant démon DHCP présent dans l...

CVE-2026-18270

Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged code on t...

CVE-2026-18270 Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability

Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged code on t...

EUVD-2026-63417

Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged code on t...

CVE-2026-18270 Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability

Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged code on t...

CVE-2026-18270

Kenwood DNR1007XR devices are affected by a local privilege escalation vulnerability in the udhcpd service. The root cause is an incorrect permission assignment on a resource used by the service, allowing an attacker with low-privileged code execution to escalate to root . The CVSS 3.0 score is 7...

CVE-2026-18270: Incorrect Permission Assignment for Critical Resource

Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged code on t...

PT-2026-65937

Name of the Vulnerable Software and Affected Versions Kenwood DNR1007XR affected versions not specified Description A local privilege escalation flaw exists in the udhcpd service. The issue is caused by incorrect permission assignment on a resource used by the service. An attacker who has already...

(Pwn2Own) Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the udhcpd...

CVE-2026-7067

A vulnerability was determined in D-Link DIR-822 A101. The impacted element is the function system of the file /udhcpcd/dhcpd.c of the component udhcpd DHCP Service. This manipulation of the argument Hostname causes command injection. The attack can be initiated remotely. The exploit has been...

D-Link DIR-822 injection vulnerability

The D-Link DIR-822 is a wireless router produced by D-Link Corporation. The D-Link DIR-822 A101 version has a vulnerability related to command injection. This vulnerability stems from the handling of the parameter “Hostname” in the system function of the udhcpd DHCP service, located in the...

CVE-2026-7067: Improper Neutralization of Special Elements used in a Command

A vulnerability was determined in D-Link DIR-822 A101. The impacted element is the function system of the file /udhcpcd/dhcpd.c of the component udhcpd DHCP Service. This manipulation of the argument Hostname causes command injection. The attack can be initiated remotely. The exploit has been...

udhcpd Code Execution

The vulnerability of the udhcpd microprogramming system in D-Link DIR-822 A1 routers is related to the failure to implement measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-7067 D-Link DIR-822 udhcpd DHCP Service dhcpd.c system command injection

A vulnerability was determined in D-Link DIR-822 A101. The impacted element is the function system of the file /udhcpcd/dhcpd.c of the component udhcpd DHCP Service. This manipulation of the argument Hostname causes command injection. The attack can be initiated remotely. The exploit has been...

CVE-2026-7067

A vulnerability was determined in D-Link DIR-822 A101. The impacted element is the function system of the file /udhcpcd/dhcpd.c of the component udhcpd DHCP Service. This manipulation of the argument Hostname causes command injection. The attack can be initiated remotely. The exploit has been...

EUVD-2026-25737

A vulnerability was determined in D-Link DIR-822 A101. The impacted element is the function system of the file /udhcpcd/dhcpd.c of the component udhcpd DHCP Service. This manipulation of the argument Hostname causes command injection. The attack can be initiated remotely. The exploit has been...

CVE-2026-7067

CVE-2026-7067 refers to a command injection in D-Link DIR-822 A_101’s udhcpd DHCP Service (file /udhcpcd/dhcpd.c, function system). The vulnerability stems from manipulating the Hostname argument, enabling remote code execution. Exploitation is possible over the network, with a publicly disclosed...

BusyBox Enumerate Host Names

For a session on an embedded BusyBox-style Linux shell, enumerate host names from common router/udhcpd paths: /var/hosts or /var/udhcpd/udhcpd.leases. !/usr/bin/env python3 -- coding: utf-8 -- Ported from Metasploit post/linux/busybox/enumhosts Msf::Post::Linux::BusyBox. Original author: Javier...