CVE-2026-4499

A vulnerability was determined in D-Link DIR-820LW 2.03. Affected is the function ssdpcgi_main of the component SSDP. Executing a manipulation can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

• CWE-77
• CWE-78
• CWE-78

• https://github.com/user-attachments/files/25790888/OS.Command.Injection.in.D-Link.DIR-820LW.B2.03.via.the.HTTP_ST.environment.variable.in.ssdpcgi_main.function.zipExploit
• https://github.com/yunleeeee/cve/issues/1Exploit
• https://vuldb.com/?ctiid.352055Permissions Required, VDB Entry
• https://vuldb.com/?id.352055Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.773883Third Party Advisory, VDB Entry
• https://www.dlink.com/Product

Published

Mar 20, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-44982CrowdSec offers crowdsourced protection against malicious IP…7.2
• CVE-2026-44983smallbitvec is a growable bit-vector for Rust, optimized for…7.3
• CVE-2026-44985Dozzle is a realtime log viewer for docker containers. Prior…9.6
• CVE-2026-44986Penpot is an open-source design tool for design and code col…9.9
• CVE-2026-44987SysReptor is a fully customizable pentest reporting platform…3.8
• CVE-2026-44988LibVNCClient is a library for easy implementation of a VNC c…8.8
• CVE-2026-44990ApostropheCMS is an open-source Node.js content management s…9.3
• CVE-2026-44991OpenClaw before 2026.4.21 contains an authorization bypass v…4.2
• CVE-2026-44992OpenClaw versions 2026.4.5 before 2026.4.20 contain an envir…5
• CVE-2026-44993OpenClaw before 2026.4.20 contains a message classification …5.4
• CVE-2026-44994OpenClaw before 2026.4.22 contains an authentication bypass …6.3
• CVE-2026-44995OpenClaw before 2026.4.20 contains an improper environment v…7.3