CNNVD-202601-2951 Information

CNNVD ID

CNNVD-202601-2951

CVE-2026-1125

  • CNNVD Published: 2026-01-18

Description (Chinese)

D-Link DIR-823X是中国友讯(D-Link)公司的一款无线路由器。 D-Link DIR-823X 250416版本存在命令注入漏洞,该漏洞源于对文件/goform/set_wifidog_settings中参数wd_enable的错误操作,可能导致命令注入攻击。

Description (English)

D-Link DIR-823X is a wireless router of D-Link. Version D-Link DIR-823X 250416 contains a command-injecting loophole, which stems from an error in the parameter wd enable in the document/goform/set wifidog settings, which may lead to an order-injection attack.

Hazard Level

Medium

Vulnerability Type

命令注入

Affected Vendor

友讯

Published

2026-01-18

Last Modified

2026-02-24

References

https://vuldb.com/?ctiid.341717 https://vuldb.com/?id.341717 https://www.dlink.com/ https://vuldb.com/?submit.734966 https://github.com/DavCloudz/cve/blob/main/D-link/DIR_823X/DIR-823X%20V250416%20Command%20Execution%20Vulnerability.md https://access.redhat.com/security/cve/cve-2026-1125

Share on: