CVE-2026-0732: D-Link Di-8200g Firmware

Critical severity, CVSS 9.8. EPSS: 11.7% chance of exploitation in the next 30 days.

A vulnerability was found in D-Link DI-8200G 17.12.20A1. This affects an unknown function of the file /upgrade_filter.asp. The manipulation of the argument path results in command injection. The attack may be performed from remote. The exploit has been made public and could be used.

Affected products

• D-Link Di-8200g Firmware: version 17.12.20a1 only

Published 2026-01-09. Last modified 2026-06-17.