CVE-2021-27113

An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/addRouting route. This could lead to Command Injection via Shell Metacharacters.

• CWE-78

• https://github.com/GD008/vuln/blob/main/DIR-816_2.mdExploit, Third Party Advisory
• https://www.dlink.com/en/security-bulletin/Vendor Advisory
• https://github.com/GD008/vuln/blob/main/DIR-816_2.mdExploit, Third Party Advisory
• https://www.dlink.com/en/security-bulletin/Vendor Advisory

Published

Apr 14, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-27099In SPIRE before versions 0.8.5, 0.9.4, 0.10.2, 0.11.3 and 0.…6.8
• CVE-2021-27101Accellion FTA 9_12_370 and earlier is affected by SQL inject…9.8
• CVE-2021-27102Accellion FTA 9_12_411 and earlier is affected by OS command…7.8
• CVE-2021-27103Accellion FTA 9_12_411 and earlier is affected by SSRF via a…9.8
• CVE-2021-27104Accellion FTA 9_12_370 and earlier is affected by OS command…9.8
• CVE-2021-27112LightCMS v1.3.5 contains a remote code execution vulnerabili…9.8
• CVE-2021-27114An issue was discovered in D-Link DIR-816 A2 1.10 B05 device…9.8
• CVE-2021-27116An issue was discovered in file profile.go in function MemPr…7.8
• CVE-2021-27117An issue was discovered in file profile.go in function GetCP…7.8
• CVE-2021-27124SQL injection in the expertise parameter in search_result.ph…6.5
• CVE-2021-27129CASAP Automated Enrollment System version 1.0 contains a cro…5.4
• CVE-2021-27130Online Reviewer System 1.0 contains a SQL injection vulnerab…9.8