Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A vulnerability was found in D-Link DIR-823X 250416. Affected by this issue is some unknown functionality of the file /goform/set_ac_status. Performing a manipulation of the argument ac_ipaddr/ac_ipstatus/ap_randtime results in os command injection. The attack may be initiated remotely. The exploit has been made public and could be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-02-08 | 3 | Disclosure1General1Patch1 |
| 2026-02-13 | 1 | Disclosure1 |
CVE-2026-2129 A vulnerability was found in D-Link DIR-823X 250416. Affected by this issue is some unknown functionality of the file /goform/set_ac_status. Performing a manipulation o… https://www.cve.org/CVERecord?id=CVE-2026-2129
Post summary
CVE-2026-2129 is a newly identified vulnerability in the D‑Link DIR‑823X router, affecting an unknown functionality of the /goform/set_ac_status file; no PoC, exploit, or patch details are provided.
CVE-2026-2129 (CVSS:7.3, HIGH) is Analyzed. A vulnerability was found in D-Link DIR-823X 250416. Affected by this issue is some unknown functionality of the file /g..https://nvd.nist.gov/vuln/detail/CVE-2026-2129 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
CVE-2026-2129 is a high‑severity vulnerability disclosed for the D‑Link DIR‑823X, affecting an unknown functionality of the /g file. No exploit, patch, or PoC information is provided.
🚨 HIGH severity: OS command injection in D-Link DIR-823X (v250416) lets attackers run remote commands — no auth needed! Exploit code is public. Patch ASAP or restrict access. https://radar.offseq.com/threat/cve-2026-2129-os-command-injection-in-d-link-dir-8-54513fc4 #OffSeq #D... https://t.co/dshRnFagOR
Post summary
A high‑severity OS command injection (CVE‑2026‑2129) in D‑Link DIR‑823X with publicly available exploit code—prompt patching or access restriction is advised.
CVE Alert: CVE-2026-2129 - D-Link - DIR-823X - https://www.redpacketsecurity.com/cve-alert-cve-2026-2129-d-link-dir-823x/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-2129 #d-link #dir-823x
Post summary
The tweet announces a CVE (CVE-2026-2129) affecting the D-Link DIR-823X and links to a website for further details, but provides no technical or exploit information.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | dir-823x | - | - | - |
| OS | dlink | dir-823x_firmware | 250416 | - | - |