CVE-2026-2218

A vulnerability was determined in D-Link DCS-933L up to 1.14.11. This affects an unknown function of the file /setSystemAdmin of the component alphapd. This manipulation of the argument AdminID causes command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. This vulnerability only affects products that are no longer supported by the maintainer.

• CWE-74
• CWE-77
• CWE-77

• https://github.com/jinhao118/cve/blob/main/D-Link%20DCS933L_v1.14.11.mdExploit, Third Party Advisory
• https://github.com/jinhao118/cve/blob/main/D-Link%20DCS933L_v1.14.11.md#pocExploit, Third Party Advisory
• https://vuldb.com/?ctiid.344936Permissions Required, VDB Entry
• https://vuldb.com/?id.344936Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.753247Third Party Advisory, VDB Entry
• https://www.dlink.com/Product

Published

Feb 9, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-22174OpenClaw versions prior to 2026.2.22 inject the x-OpenClaw-r…6.8
• CVE-2026-22175OpenClaw versions prior to 2026.2.23 contain an exec approva…7.1
• CVE-2026-22176OpenClaw versions prior to 2026.2.19 contain a command injec…7.8
• CVE-2026-22177OpenClaw versions prior to 2026.2.21 fail to filter dangerou…8.8
• CVE-2026-22178OpenClaw versions prior to 2026.2.19 construct RegExp object…8.2
• CVE-2026-22179OpenClaw versions prior to 2026.2.22 in macOS node-host syst…7.5
• CVE-2026-22180OpenClaw versions prior to 2026.3.2 contain a path-confineme…5.3
• CVE-2026-22181OpenClaw versions prior to 2026.3.2 contain a DNS pinning by…7.6
• CVE-2026-22182wpDiscuz before 7.6.47 contains an unauthenticated denial of…8.7
• CVE-2026-22183wpDiscuz before 7.6.47 contains a stored cross-site scriptin…5.4
• CVE-2026-22184zlib versions up to and including 1.3.1.2 include a global b…7.8
• CVE-2026-22185OpenLDAP Lightning Memory-Mapped Database (LMDB) versions up…4.6