CVE-2021-44881: D-Link Dir-882 Firmware

Critical severity, CVSS 9.8. EPSS: 4.6% chance of exploitation in the next 30 days.

D-Link device DIR_882 DIR_882_FW1.30B06_Hotfix_02 was discovered to contain a command injection vulnerability in the twsystem function. This vulnerability allows attackers to execute arbitrary commands via a crafted HNAP1 POST request.

Affected products

• D-Link Dir-882 Firmware: up to and including 1.30b06; version 1.30b06 only

Published 2022-02-04. Last modified 2026-06-17.