CVE-2018-17787: D-Link Dir-823g Firmware

Critical severity, CVSS 9.8. EPSS: 3.7% chance of exploitation in the next 30 days.

On D-Link DIR-823G devices, the GoAhead configuration allows /HNAP1 Command Injection via shell metacharacters in the POST data, because this data is sent directly to the "system" library function.

Affected products

• D-Link Dir-823g Firmware: affected versions not specified

Published 2018-10-02. Last modified 2026-06-17.