CVE-2026-2061: D-Link DIR-823X Firmware

High severity, CVSS 7.2. EPSS: 5.2% chance of exploitation in the next 30 days.

A vulnerability was determined in D-Link DIR-823X 250416. Affected by this issue is the function sub_424D20 of the file /goform/set_ipv6. Executing a manipulation can lead to os command injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.

Affected products

• D-Link DIR-823X Firmware: version 250416 only

Published 2026-02-06. Last modified 2026-06-17.