D-Link DIR-823X Firmware vulnerabilities

39 CVEs affecting D-Link DIR-823X Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-2210, published 2026-02-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-29635: D-Link DIR-823X Command Injection Vulnerability, published 2025-03-25. High severity, CVSS 7.2. Actively exploited: in CISA KEV since 2026-04-24. EPSS: 87.9% chance of exploitation in the next 30 days. A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to…
CVE-2026-1125, published 2026-01-18. Critical severity, CVSS 9.8. EPSS: 15.7% chance of exploitation in the next 30 days. A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub_412E7C of the file /goform/set_wifidog_settings. Executing a manipulation of the argument…
CVE-2025-1103, published 2025-02-07. Medium severity, CVSS 6.5. EPSS: 14.1% chance of exploitation in the next 30 days. A vulnerability, which was classified as problematic, was found in D-Link DIR-823X 240126/240802. This affects the function set_wifi_blacklists of the file /goform/set_wifi_blacklists of the…
CVE-2025-10401, published 2025-09-14. High severity, CVSS 8.8. EPSS: 8.5% chance of exploitation in the next 30 days. A vulnerability was detected in D-Link DIR-823x up to 250416. The affected element is an unknown function of the file /goform/diag_ping. Performing manipulation of the argument target_addr results in…
CVE-2025-10634, published 2025-09-18. High severity, CVSS 8.8. EPSS: 7.4% chance of exploitation in the next 30 days. A weakness has been identified in D-Link DIR-823X 240126/240802/250416. The impacted element is the function sub_412E7C of the file /usr/sbin/goahead of the component Environment Variable Handler.…
CVE-2026-2142, published 2026-02-08. High severity, CVSS 7.2. EPSS: 6.6% chance of exploitation in the next 30 days. A weakness has been identified in D-Link DIR-823X 250416. This vulnerability affects the function sub_420688 of the file /goform/set_qos. Executing a manipulation can lead to os command injection.…
CVE-2026-2081, published 2026-02-07. High severity, CVSS 7.2. EPSS: 6.4% chance of exploitation in the next 30 days. A vulnerability was determined in D-Link DIR-823X 250416. The affected element is an unknown function of the file /goform/set_password. This manipulation of the argument http_passwd causes os command…
CVE-2026-2082, published 2026-02-07. High severity, CVSS 7.2. EPSS: 5.9% chance of exploitation in the next 30 days. A vulnerability was identified in D-Link DIR-823X 250416. The impacted element is an unknown function of the file /goform/set_mac_clone. Such manipulation of the argument mac leads to os command…
CVE-2025-10814, published 2025-09-22. High severity, CVSS 8.8. EPSS: 5.8% chance of exploitation in the next 30 days. A vulnerability was determined in D-Link DIR-823X 240126/240802/250416. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/goahead. This manipulation of the argument…
CVE-2026-2063, published 2026-02-06. High severity, CVSS 7.2. EPSS: 5.3% chance of exploitation in the next 30 days. A security flaw has been discovered in D-Link DIR-823X 250416. This vulnerability affects unknown code of the file /goform/set_ac_server of the component Web Management Interface. The manipulation of…

Latest

CVE-2026-2210, published 2026-02-09. High severity, CVSS 7.2. EPSS: 4.6% chance of exploitation in the next 30 days. A vulnerability has been found in D-Link DIR-823X 250416. This affects the function sub_4211C8 of the file /goform/set_filtering. Such manipulation leads to os command injection. The attack may be…
CVE-2026-2175, published 2026-02-08. High severity, CVSS 7.2. EPSS: 4.5% chance of exploitation in the next 30 days. A weakness has been identified in D-Link DIR-823X 250416. This vulnerability affects the function sub_420618 of the file /goform/set_upnp. This manipulation of the argument upnp_enable causes os…
CVE-2026-2157, published 2026-02-08. High severity, CVSS 7.2. EPSS: 4.7% chance of exploitation in the next 30 days. A security vulnerability has been detected in D-Link DIR-823X 250416. This affects the function sub_4175CC of the file /goform/set_static_route_table. Such manipulation of the argument…
CVE-2026-2155, published 2026-02-08. High severity, CVSS 7.2. EPSS: 4.6% chance of exploitation in the next 30 days. A security flaw has been discovered in D-Link DIR-823X 250416. The affected element is the function sub_4208A0 of the file /goform/set_dmz of the component Configuration Handler. The manipulation of…
CVE-2026-2143, published 2026-02-08. High severity, CVSS 7.2. EPSS: 5% chance of exploitation in the next 30 days. A security vulnerability has been detected in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/set_ddns of the component DDNS Service. The manipulation of the…
CVE-2026-2129, published 2026-02-08. High severity, CVSS 7.2. EPSS: 5% chance of exploitation in the next 30 days. A vulnerability was found in D-Link DIR-823X 250416. Affected by this issue is some unknown functionality of the file /goform/set_ac_status. Performing a manipulation of the argument…
CVE-2026-2120, published 2026-02-08. High severity, CVSS 7.2. EPSS: 4.7% chance of exploitation in the next 30 days. A vulnerability was identified in D-Link DIR-823X 250416. This affects an unknown function of the file /goform/set_server_settings of the component Configuration Parameter Handler. The manipulation…
CVE-2026-2084, published 2026-02-07. High severity, CVSS 7.2. EPSS: 4.6% chance of exploitation in the next 30 days. A weakness has been identified in D-Link DIR-823X 250416. This impacts an unknown function of the file /goform/set_language. Executing a manipulation of the argument langSelection can lead to os…