CVE-2023-42406: D-Link Dar-7000 Firmware

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

SQL injection vulnerability in D-Link Online behavior audit gateway DAR-7000 V31R02B1413C allows a remote attacker to obtain sensitive information and execute arbitrary code via the editrole.php component.

Affected products

• D-Link Dar-7000 Firmware: version 31r02b1413c only

Published 2023-10-26. Last modified 2026-06-17.