Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A vulnerability was found in D-Link DIR-882 1.01B02. Impacted is the function sprintf of the file prog.cgi of the component HNAP1 SetNetworkSettings Handler. The manipulation of the argument IPAddress results in os command injection. The attack may be performed from remote. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-04-09 | 2 | Disclosure1Exploit1 |
| 2026-04-10 | 1 | General1 |
⚡ New CVE Alert: CVE-2026-5844 📊 Severity: 7.2 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-5844 #CVE-2026-5844 #CVE #High #CyberSecurity #InfoSec https://t.co/M9PZHFLfKI
Post summary
The tweet announces CVE-2026-5844 with a 7.2 severity score and indicates a high risk, but it does not provide evidence of exploitation, a PoC, or a fix.
D-Link DIR-882 HNAP1 SetNetworkSettings prog.cgi sprintf os command injection CVE: CVE-2026-5844 PT ID: PT-2026-31585 Vendor: D-link Product: DIR-882 CVSS: 8.6 Credits: meshaal (VulDB User) Description: A vulnerability was found in D-Link DIR-882 1.01B02. Impacted is the function sprintf of the file prog.cgi of the component HNAP1 SetNetworkSettings Handler. The manipulation of the argument IPAddress results in os command injection. The attack may be performed from remote. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer. References: • https://dbugs.ptsecurity.com/vulnerability/CVE-2026-5844 • https://vuldb.com/vuln/356329 • https://vuldb.com/vuln/356329/cti • https://vuldb.com/submit/790290 • https://files.catbox.moe/ei31k1.zip • https://www.dlink.com/ #dbugs_vuln
Post summary
The D‑Link DIR‑882 vulnerability (CVE‑2026‑5844) allows remote OS command injection via a publicly available exploit, but no patch or active exploitation is reported.
CVE-2026-5844 Remote OS Command Injection in D-Link DIR-882 1.01B02 HNAP1 SetNetworkSet... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5844 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
The text announces a remote OS command injection CVE (CVE‑2026‑5844) for a D‑Link router, linking to a vulnerability notification, but offers no exploitation, patch, or PoC details.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | dir-882 | a1 | - | - |
| OS | dlink | dir-882_firmware | 1.01b02 | - | - |