CVE-2018-17786: D-Link Dir-823g Firmware

Critical severity, CVSS 9.8. EPSS: 4.1% chance of exploitation in the next 30 days.

On D-Link DIR-823G devices, ExportSettings.sh, upload_settings.cgi, GetDownLoadSyslog.sh, and upload_firmware.cgi do not require authentication, which allows remote attackers to execute arbitrary code.

Affected products

• D-Link Dir-823g Firmware: affected versions not specified

Published 2018-10-02. Last modified 2026-06-17.