VendorsD-Linkdir-823x_firmware250416
Vulnerabilities

D-Link dir-823x Firmware 250416

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

25CVEs
CVE-2025-10634
D-Link DIR-823X Environment Variable goahead sub_412E7C command injection
Published 2025-09-18 · Analyzed
8.8EPSS 0.074
CVE-2025-10814
D-Link DIR-823X goahead command injection
Published 2025-09-22 · Analyzed
8.8EPSS 0.061
CVE-2025-11092
D-Link DIR-823X set_switch_settings sub_412E7C command injection
Published 2025-09-28 · Analyzed
8.8EPSS 0.041
CVE-2025-11095
D-Link DIR-823X delete_offline_device command injection
Published 2025-09-28 · Analyzed
8.8EPSS 0.041
CVE-2025-11096
D-Link DIR-823X diag_traceroute command injection
Published 2025-09-28 · Analyzed
8.8EPSS 0.041
CVE-2025-11097
D-Link DIR-823X set_device_name command injection
Published 2025-09-28 · Analyzed
8.8EPSS 0.041
CVE-2025-11098
D-Link DIR-823X set_wifi_blacklists command injection
Published 2025-09-28 · Analyzed
8.8EPSS 0.041
CVE-2025-11099
D-Link DIR-823X delete_prohibiting uci_del command injection
Published 2025-09-28 · Analyzed
8.8EPSS 0.041
CVE-2025-11100
D-Link DIR-823X set_wifi_blacklists uci_set command injection
Published 2025-09-28 · Analyzed
8.8EPSS 0.041
CVE-2026-1544
D-Link DIR-823X set_mode sub_41E2A0 os command injection
Published 2026-01-28 · Analyzed
8.8EPSS 0.035
CVE-2025-55848
An issue was discovered in DIR-823 firmware 20250416. There is an RCE vulnerability in the set_cassword settings interface, as the http_casswd parameter is not filtered by '&'to allow injection of reverse connection commands.
Published 2025-09-26 · Analyzed
8.8EPSS 0.004
CVE-2026-2142
D-Link DIR-823X set_qos sub_420688 os command injection
Published 2026-02-08 · Analyzed
8.3EPSS 0.059
CVE-2026-2143
D-Link DIR-823X DDNS Service set_ddns os command injection
Published 2026-02-08 · Analyzed
8.3EPSS 0.045
CVE-2026-2129
D-Link DIR-823X set_ac_status os command injection
Published 2026-02-08 · Analyzed
8.3EPSS 0.045
CVE-2026-2157
D-Link DIR-823X set_static_route_table sub_4175CC os command injection
Published 2026-02-08 · Analyzed
8.3EPSS 0.041
CVE-2026-2120
D-Link DIR-823X Configuration Parameter set_server_settings os command injection
Published 2026-02-08 · Analyzed
8.3EPSS 0.041
CVE-2026-2084
D-Link DIR-823X set_language os command injection
Published 2026-02-07 · Analyzed
8.3EPSS 0.040
CVE-2026-2210
D-Link DIR-823X set_filtering sub_4211C8 os command injection
Published 2026-02-09 · Analyzed
8.3EPSS 0.040
CVE-2026-2155
D-Link DIR-823X Configuration set_dmz sub_4208A0 os command injection
Published 2026-02-08 · Analyzed
8.3EPSS 0.040
CVE-2026-2175
D-Link DIR-823X set_upnp sub_420618 os command injection
Published 2026-02-08 · Analyzed
8.3EPSS 0.039
CVE-2026-2081
D-Link DIR-823X set_password os command injection
Published 2026-02-07 · Analyzed
7.2EPSS 0.055
CVE-2026-2082
D-Link DIR-823X set_mac_clone os command injection
Published 2026-02-07 · Analyzed
7.2EPSS 0.051
CVE-2026-2063
D-Link DIR-823X Web Management set_ac_server os command injection
Published 2026-02-06 · Analyzed
7.2EPSS 0.046
CVE-2026-2061
D-Link DIR-823X set_ipv6 sub_424D20 os command injection
Published 2026-02-06 · Analyzed
7.2EPSS 0.045
CVE-2026-1685
D-Link DIR-823X Login sub_40AC74 excessive authentication
Published 2026-01-30 · Analyzed
5.9EPSS 0.010