CVE-2023-43128: D-Link Dir-806 Firmware

Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days.

D-LINK DIR-806 1200M11AC wireless router DIR806A1_FW100CNb11 is vulnerable to command injection due to lax filtering of HTTP_ST parameters.

Affected products

• D-Link Dir-806 Firmware: version 100cnb11 only

Published 2023-09-21. Last modified 2026-06-17.