CVE-2022-26258

D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.

• CWE-78
• CWE-78

• https://github.com/skyedai910/Vuln/tree/master/DIR-820L/command_execution_0Broken Link, Exploit, Third Party Advisory
• https://github.com/zhizhuoshuma/cve_info_data/blob/ccaed4b94ba762eb8a8e003bfa762a7754b8182e/Vuln/Vuln/DIR-820L/command_execution_0/README.mdExploit, Third Party Advisory
• https://www.dlink.com/en/security-bulletin/Not Applicable, Vendor Advisory
• https://github.com/skyedai910/Vuln/tree/master/DIR-820L/command_execution_0Broken Link, Exploit, Third Party Advisory
• https://github.com/zhizhuoshuma/cve_info_data/blob/ccaed4b94ba762eb8a8e003bfa762a7754b8182e/Vuln/Vuln/DIR-820L/command_execution_0/README.mdExploit, Third Party Advisory
• https://www.dlink.com/en/security-bulletin/Not Applicable, Vendor Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-26258US Government Resource

Published

Mar 28, 2022

Last Modified

Jul 9, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-2625A vulnerability was found in PostgreSQL. This attack require…8
• CVE-2022-26250Synaman v5.1 and below was discovered to contain weak file p…7.8
• CVE-2022-26251The HTTP interface of Synaman v5.1 and below was discovered …7.2
• CVE-2022-26252aaPanel v6.8.21 was discovered to be vulnerable to directory…6.5
• CVE-2022-26254WoWonder The Ultimate PHP Social Network Platform v4.0.0 was…5.3
• CVE-2022-26255Clash for Windows v0.19.8 was discovered to allow arbitrary …9.8
• CVE-2022-26259A buffer over flow in Xiongmai DVR devices NBD80X16S-KL, NBD…7.8
• CVE-2022-2626Incorrect Privilege Assignment in GitHub repository hestiacp…7.2
• CVE-2022-26260Simple-Plist v1.3.0 was discovered to contain a prototype po…9.8
• CVE-2022-26263Yonyou u8 v13.0 was discovered to contain a DOM-based cross-…6.1
• CVE-2022-26265Contao Managed Edition v1.5.0 was discovered to contain a re…9.8
• CVE-2022-26266Piwigo v12.2.0 was discovered to contain a SQL injection vul…8.8