CVE-2026-2175

A weakness has been identified in D-Link DIR-823X 250416. This vulnerability affects the function sub_420618 of the file /goform/set_upnp. This manipulation of the argument upnp_enable causes os command injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.

• CWE-77
• CWE-78
• CWE-78

• https://github.com/master-abc/cve/issues/31Exploit, Issue Tracking
• https://vuldb.com/?ctiid.344876Permissions Required, VDB Entry
• https://vuldb.com/?id.344876Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.749263Third Party Advisory, VDB Entry
• https://www.dlink.com/Product

Published

Feb 8, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-21744Rejected reason: Not used
• CVE-2026-21745Rejected reason: Not used
• CVE-2026-21746Rejected reason: Not used
• CVE-2026-21747Rejected reason: Not used
• CVE-2026-21748Rejected reason: Not used
• CVE-2026-21749Rejected reason: Not used
• CVE-2026-21750Rejected reason: Not used
• CVE-2026-21751HCL Hive is affected by a cryptographic primitive with a ris…7.4
• CVE-2026-21752HCL Hive is affected by a use of vulnerable third-party comp…7.5
• CVE-2026-21753HCL Hive is affected by weak software supply chain governanc…4.2
• CVE-2026-21754HCL Hive is affected by multiple infrastructure and network …5.4
• CVE-2026-21755HCL Hive is affected by a missing rate limit which could all…5.3