Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A vulnerability was identified in D-Link DIR-823X 250416. This affects an unknown function of the file /goform/set_server_settings of the component Configuration Parameter Handler. The manipulation of the argument terminal_addr/server_ip/server_port leads to os command injection. The attack may be initiated remotely. The exploit is publicly available and might be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-02-08 | 3 | Disclosure2Patch1 |
| 2026-02-13 | 1 | Disclosure1 |
CVE-2026-2120 A vulnerability was identified in D-Link DIR-823X 250416. This affects an unknown function of the file /goform/set_server_settings of the component Configuration Parame… https://www.cve.org/CVERecord?id=CVE-2026-2120
Post summary
The text reports a newly identified vulnerability in the D‑Link DIR‑823X device, specifying an affected file but providing no further technical details, exploits, or mitigation information.
🚨 HIGH severity: D-Link DIR-823X routers (v250416) vulnerable to remote OS command injection — public exploit available! Patch ASAP or restrict access to management. Details: https://radar.offseq.com/threat/cve-2026-2120-os-command-injection-in-d-link-dir-8-eb87b902 #OffSeq #D... https://t.co/LLBfGt4Pib
Post summary
CVE-2026-2120 is a high‑severity remote OS command injection flaw in D‑Link DIR‑823X routers; a public exploit exists, and users are urged to patch immediately or lock down management access.
CVE-2026-2120 (CVSS:7.3, HIGH) is Analyzed. A vulnerability was identified in D-Link DIR-823X 250416. This affects an unknown function of the file /goform/set_serve..https://nvd.nist.gov/vuln/detail/CVE-2026-2120 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces the CVE-2026-2120 vulnerability in a D-Link router, providing its high CVSS score and affected file, but offers no PoC, exploit code, or patch information.
CVE Alert: CVE-2026-2120 - D-Link - DIR-823X - https://www.redpacketsecurity.com/cve-alert-cve-2026-2120-d-link-dir-823x/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-2120 #d-link #dir-823x
Post summary
The tweet announces a CVE alert for D-Link DIR‑823X (CVE-2026‑2120) but offers no PoC, exploit, patch, or technical detail.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | dir-823x | - | - | - |
| OS | dlink | dir-823x_firmware | 250416 | - | - |