Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A security flaw has been discovered in D-Link DIR-823X 250416. The affected element is the function sub_4208A0 of the file /goform/set_dmz of the component Configuration Handler. The manipulation of the argument dmz_host/dmz_enable results in os command injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-02-08 | 2 | Disclosure1Exploit1 |
| 2026-03-09 | 1 | General1 |
CVE-2026-2155 A security flaw has been discovered in D-Link DIR-823X 250416. The affected element is the function sub_4208A0 of the file /goform/set_dmz of the component Configuratio… https://www.cve.org/CVERecord?id=CVE-2026-2155
Post summary
A security flaw was identified in the D-Link DIR‑823X firmware, affecting the sub_4208A0 function in the /goform/set_dmz component, with no known exploits, patches, or active exploitation reported.
📌 Top CVEs recientes (CVSS>=7.0): 1. 🛠️ CVE-2026-2155 (CVSS: 7.2) 2. 🛠️ CVE-2026-2152 (CVSS: 7.2) 3. 🛠️ CVE-2026-2151 (CVSS: 7.2) 4. 🛠️ CVE-2026-2143 (CVSS: 7.2) 5. 🛠️ CVE-2026-2142 (CVSS: 7.2) #CyberSecurity #CVE #Infosec
Post summary
The tweet enumerates recent CVEs with CVSS scores above 7.0 but provides no additional technical or operational details.
🚨 HIGH severity: OS command injection in D-Link DIR-823X (v250416) lets remote attackers run commands via /goform/set_dmz. Public exploit released! Patch ASAP, restrict access, monitor traffic. https://radar.offseq.com/threat/cve-2026-2155-os-command-injection-in-d-link-dir-8-... https://t.co/824SyfgD9P
Post summary
A high‑severity OS command injection in D‑Link DIR‑823X is publicly exploitable via /goform/set_dmz; a patch is urgently recommended.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | dir-823x | - | - | - |
| OS | dlink | dir-823x_firmware | 250416 | - | - |