CVE-2026-2082

A vulnerability was identified in D-Link DIR-823X 250416. The impacted element is an unknown function of the file /goform/set_mac_clone. Such manipulation of the argument mac leads to os command injection. The attack may be performed from remote. The exploit is publicly available and might be used.
References
Link Resource
https://github.com/master-abc/cve/issues/21 Exploit Issue Tracking
https://github.com/master-abc/cve/issues/21#issue-3847172823 Exploit Issue Tracking
https://vuldb.com/?ctiid.344649 Permissions Required VDB Entry
https://vuldb.com/?id.344649 Third Party Advisory VDB Entry
https://vuldb.com/?submit.745854 Third Party Advisory VDB Entry
https://www.dlink.com/ Product
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dlink:dir-823x_firmware:250416:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-823x:-:*:*:*:*:*:*:*

History

10 Feb 2026, 14:57

Type Values Removed Values Added
References () https://github.com/master-abc/cve/issues/21 - () https://github.com/master-abc/cve/issues/21 - Exploit, Issue Tracking
References () https://github.com/master-abc/cve/issues/21#issue-3847172823 - () https://github.com/master-abc/cve/issues/21#issue-3847172823 - Exploit, Issue Tracking
References () https://vuldb.com/?ctiid.344649 - () https://vuldb.com/?ctiid.344649 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.344649 - () https://vuldb.com/?id.344649 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.745854 - () https://vuldb.com/?submit.745854 - Third Party Advisory, VDB Entry
References () https://www.dlink.com/ - () https://www.dlink.com/ - Product
First Time Dlink dir-823x
Dlink dir-823x Firmware
Dlink
CPE cpe:2.3:o:dlink:dir-823x_firmware:250416:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-823x:-:*:*:*:*:*:*:*

07 Feb 2026, 10:15

Type Values Removed Values Added
New CVE

Information

Published : 2026-02-07 10:15

Updated : 2026-02-10 14:57


NVD link : CVE-2026-2082

Mitre link : CVE-2026-2082

CVE.ORG link : CVE-2026-2082


JSON object : View

Products Affected

dlink

  • dir-823x
  • dir-823x_firmware
CWE
CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')