CVE-2026-4499Disclosure(dlink / dir-820lw)

LOWCVSS 9.8 · CRITICAL

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was determined in D-Link DIR-820LW 2.03. Affected is the function ssdpcgi_main of the component SSDP. Executing a manipulation can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

dlink CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-77CWE-78

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

dir-820lw
dir-820lw_firmware

Threat summary

4 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
General: 1 classified signal
Peaked at 3 mentions on most recent observed day (2026-03-21)
4 total mentions across 2 days

Affected systems

Vendors

dlink

Products

dir-820lwdir-820lw_firmware

2 versions affected across 2 products

Deep dive

Activity timeline4 mentions / 2d

Signal classification2 categories

Disclosure

375.0%

General

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-20	1	Disclosure1
2026-03-21	3	Disclosure2General1

Full discourse4 posts

Infoflowcloud@infoflowcloud201d
Disclosure
🚨*CVE* CVE-2026-4499 A vulnerability was determined in D-Link DIR-820LW 2.03. Affected is the function ssdpcgi_main of the component SSDP. Executing a manipulation can lead to os command in… https://www.cve.org/CVERecord?id=CVE-2026-4499 ----- Traducción: CVE-2026-4499 Se … http://infoflow.cloud`
Post summary
The post announces CVE-2026-4499, a vulnerability in the D‑Link DIR‑820LW router's SSDP component that could allow OS command execution; no exploit, PoC, or patch is provided.
0000028
61 followersView on X
CVE@CVEnew201d
Disclosure
CVE-2026-4499 A vulnerability was determined in D-Link DIR-820LW 2.03. Affected is the function ssdpcgi_main of the component SSDP. Executing a manipulation can lead to os command in… https://www.cve.org/CVERecord?id=CVE-2026-4499
Post summary
CVE‑2026‑4499 is a disclosed vulnerability in the D‑Link DIR‑820LW SSDP component, allowing OS command execution, but no PoC, exploit, or patch information is provided.
00000279
56.8K followersView on X
RedPacket Security@RedPacketSec202d
General
CVE Alert: CVE-2026-4499 - D-Link - DIR-820LW - https://www.redpacketsecurity.com/cve-alert-cve-2026-4499-d-link-dir-820lw/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-4499 #d-link #dir-820lw
Post summary
The tweet issues a CVE alert for CVE-2026-4499 affecting D-Link DIR‑820LW and links to a security blog for more information, but provides no technical, exploit, or patch details.
0000070
3.6K followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash202d
Disclosure
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-4499 - D-Link DIR-820LW SSDP ssdpcgi_main os command injection Intel Report: https://ift.tt/UHJiQA6
Post summary
The tweet announces the newly reported CVE-2026-4499 affecting D-Link DIR-820LW with an OS command injection in the SSDP module, but provides no PoC, exploit, patch, or evidence of active exploitation.
0000070
334 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	dlink	dir-820lw	-	-	-
OS	dlink	dir-820lw_firmware	2.03	-	-

Explore more

Back to dashboard dlink CVEs dir-820lw vulnerabilities

What researchers are saying

CVE-2026-4499

Infoflowcloud@infoflowcloudDisclosure

The post announces CVE-2026-4499, a vulnerability in the D‑Link DIR‑820LW router's SSDP component that could allow OS command execution; no exploit, PoC, or patch is provided.

CVE@CVEnewDisclosure

CVE‑2026‑4499 is a disclosed vulnerability in the D‑Link DIR‑820LW SSDP component, allowing OS command execution, but no PoC, exploit, or patch information is provided.

RedPacket Security@RedPacketSecGeneral

The tweet issues a CVE alert for CVE-2026-4499 affecting D-Link DIR‑820LW and links to a security blog for more information, but provides no technical, exploit, or patch details.

CyberDudeBivash® | Global Cybersecurity Company@cyberbivashDisclosure

The tweet announces the newly reported CVE-2026-4499 affecting D-Link DIR-820LW with an OS command injection in the SSDP module, but provides no PoC, exploit, patch, or evidence of active exploitation.