Security Advisory

CVE-2026-2081

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-02-07 09:32:09
Last updated 2026-02-23 09:31:01
Assigner VulDB
State PUBLISHED

Description

A vulnerability was determined in D-Link DIR-823X 250416. The affected element is an unknown function of the file /goform/set_password. This manipulation of the argument http_passwd causes os command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.