CVE-2022-26258: D-Link DIR-820L Remote Code Execution Vulnerability

Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-09-08. EPSS: 91.6% chance of exploitation in the next 30 days.

D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.

Affected products

• D-Link DIR-820L Firmware: version 1.05b03 only

Published 2022-03-28. Last modified 2026-07-09.