Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security vulnerability has been detected in D-Link DIR-823X 250416. This affects the function sub_4175CC of the file /goform/set_static_route_table. Such manipulation of the argument interface/destip/netmask/gateway/metric leads to os command injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-2157 A security vulnerability has been detected in D-Link DIR-823X 250416. This affects the function sub_4175CC of the file /goform/set_static_route_table. Such manipulation… https://www.cve.org/CVERecord?id=CVE-2026-2157
Post summary
The post announces the discovery of CVE‑2026‑2157 in D‑Link DIR‑823X routers, noting the specific function affected, but does not provide proof‑of‑concept, exploitation tools, or patch information.
🚨 HIGH severity alert: OS command injection in D-Link DIR-823X (fw 250416) lets remote attackers run commands with no auth required! Patch ASAP or segment networks. Details: https://radar.offseq.com/threat/cve-2026-2157-os-command-injection-in-d-link-dir-8-f7732c6f #OffSeq #DL... https://t.co/94A0lgyffc
Post summary
A high‑severity OS command injection in D-Link DIR‑823X allows unauthenticated remote execution; immediate patching or network segmentation is advised.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | dir-823x | - | - | - |
| OS | dlink | dir-823x_firmware | 250416 | - | - |