Advisories · Technology

D-Link DIR-823X.

Every CVE that names D-Link DIR-823X among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-2210 CVE record

CVSS 8.6 High

D-Link DIR-823X set_filtering sub_4211C8 os command injection
- D-Link DIR-823X
- Command injection
Not analysed yet 9 Feb 2026
CVE-2026-2175 CVE record

CVSS 8.6 High

D-Link DIR-823X set_upnp sub_420618 os command injection
- D-Link DIR-823X
- Command injection
Not analysed yet 8 Feb 2026
CVE-2026-2157 CVE record

CVSS 8.6 High

D-Link DIR-823X set_static_route_table sub_4175CC os command injection
- D-Link DIR-823X
- Command injection
Not analysed yet 8 Feb 2026
CVE-2026-2155 CVE record

CVSS 8.6 High

D-Link DIR-823X Configuration set_dmz sub_4208A0 os command injection
- D-Link DIR-823X
- Command injection
Not analysed yet 8 Feb 2026
CVE-2026-2143 CVE record

CVSS 8.6 High

D-Link DIR-823X DDNS Service set_ddns os command injection
- D-Link DIR-823X
- Command injection
Not analysed yet 8 Feb 2026
CVE-2026-2142 CVE record

CVSS 8.6 High

D-Link DIR-823X set_qos sub_420688 os command injection
- D-Link DIR-823X
- Command injection
Not analysed yet 8 Feb 2026
CVE-2026-2129 CVE record

CVSS 8.6 High

D-Link DIR-823X set_ac_status os command injection
- D-Link DIR-823X
- Command injection
Not analysed yet 8 Feb 2026
CVE-2026-2120 CVE record

CVSS 8.6 High

D-Link DIR-823X Configuration Parameter set_server_settings os command injection
- D-Link DIR-823X
- Command injection
Not analysed yet 8 Feb 2026
CVE-2026-2084 CVE record

CVSS 8.6 High

D-Link DIR-823X set_language os command injection
- D-Link DIR-823X
- Command injection
Not analysed yet 7 Feb 2026
CVE-2026-2082 CVE record

CVSS 5.1 Medium

D-Link DIR-823X set_mac_clone os command injection
- D-Link DIR-823X
- Command injection
Not analysed yet 7 Feb 2026
CVE-2026-2081 CVE record

CVSS 5.1 Medium

D-Link DIR-823X set_password os command injection
- D-Link DIR-823X
- Command injection
Not analysed yet 7 Feb 2026
CVE-2026-2063 CVE record

CVSS 5.1 Medium

D-Link DIR-823X Web Management set_ac_server os command injection
- D-Link DIR-823X
- Command injection
Not analysed yet 6 Feb 2026
CVE-2026-2061 CVE record

CVSS 5.1 Medium

D-Link DIR-823X set_ipv6 sub_424D20 os command injection
- D-Link DIR-823X
- Command injection
Not analysed yet 6 Feb 2026
CVE-2026-1685 CVE record

CVSS 6.3 Medium

D-Link DIR-823X Login sub_40AC74 excessive authentication
- D-Link DIR-823X
- Authentication bypass
- CWE-799
Not analysed yet 30 Jan 2026
CVE-2026-1544 CVE record

CVSS 5.3 Medium

D-Link DIR-823X set_mode sub_41E2A0 os command injection
- D-Link DIR-823X
- Command injection
Not analysed yet 28 Jan 2026
CVE-2026-1125 CVE record

CVSS 6.9 Medium

D-Link DIR-823X set_wifidog_settings sub_412E7C command injection
- D-Link DIR-823X
- Other injection
- Command injection
Not analysed yet 18 Jan 2026
CVE-2025-14208 CVE record

CVSS 5.3 Medium

D-Link DIR-823X set_wan_settings sub_415028 command injection
- D-Link DIR-823X
- Other injection
- Command injection
Not analysed yet 8 Dec 2025
CVE-2025-11100 CVE record

CVSS 5.3 Medium

D-Link DIR-823X set_wifi_blacklists uci_set command injection
- D-Link DIR-823X
- Other injection
- Command injection
Not analysed yet 28 Sept 2025
CVE-2025-11099 CVE record

CVSS 5.3 Medium

D-Link DIR-823X delete_prohibiting uci_del command injection
- D-Link DIR-823X
- Other injection
- Command injection
Not analysed yet 28 Sept 2025
CVE-2025-11098 CVE record

CVSS 5.3 Medium

D-Link DIR-823X set_wifi_blacklists command injection
- D-Link DIR-823X
- Other injection
- Command injection
Not analysed yet 28 Sept 2025
CVE-2025-11097 CVE record

CVSS 5.3 Medium

D-Link DIR-823X set_device_name command injection
- D-Link DIR-823X
- Other injection
- Command injection
Not analysed yet 28 Sept 2025
CVE-2025-11096 CVE record

CVSS 5.3 Medium

D-Link DIR-823X diag_traceroute command injection
- D-Link DIR-823X
- Other injection
- Command injection
Not analysed yet 28 Sept 2025
CVE-2025-11095 CVE record

CVSS 5.3 Medium

D-Link DIR-823X delete_offline_device command injection
- D-Link DIR-823X
- Other injection
- Command injection
Not analysed yet 28 Sept 2025
CVE-2025-11092 CVE record

CVSS 5.3 Medium

D-Link DIR-823X set_switch_settings sub_412E7C command injection
- D-Link DIR-823X
- Other injection
- Command injection
Not analysed yet 28 Sept 2025
CVE-2025-10814 CVE record

CVSS 5.3 Medium

D-Link DIR-823X goahead command injection
- D-Link DIR-823X
- Other injection
- Command injection
Not analysed yet 22 Sept 2025
CVE-2025-10634 CVE record

CVSS 5.3 Medium

D-Link DIR-823X Environment Variable goahead sub_412E7C command injection
- D-Link DIR-823X
- Other injection
- Command injection
Not analysed yet 18 Sept 2025
CVE-2025-10401 CVE record

CVSS 5.3 Medium

D-Link DIR-823x diag_ping command injection
- D-Link DIR-823x
- Other injection
- Command injection
Not analysed yet 14 Sept 2025
CVE-2025-10123 CVE record

CVSS 6.9 Medium

D-Link DIR-823X set_static_leases sub_415028 command injection
- D-Link DIR-823X
- Other injection
- Command injection
Not analysed yet 9 Sept 2025
CVE-2025-2717 CVE record

CVSS 5.1 Medium

D-Link DIR-823X HTTP POST Request diag_nslookup sub_41710C os command injection
- D-Link DIR-823X
- Command injection
Not analysed yet 24 Mar 2025
CVE-2025-1103 CVE record

CVSS 7.1 HighCritical · CVSS 7+ and EPSS

D-Link DIR-823X HTTP POST Request set_wifi_blacklists null pointer dereference
- D-Link DIR-823X
- Denial of service
- Memory corruption
Not analysed yet 7 Feb 2025
CVE-2025-0492 CVE record

CVSS 8.7 High

D-Link DIR-823X FUN_00412244 null pointer dereference
- D-Link DIR-823X
- Denial of service
- Memory corruption
Not analysed yet 15 Jan 2025