CVE-2026-0732

A vulnerability was found in D-Link DI-8200G 17.12.20A1. This affects an unknown function of the file /upgrade_filter.asp. The manipulation of the argument path results in command injection. The attack may be performed from remote. The exploit has been made public and could be used.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cna@vuldb.com

Published

2026-01-09

Last modified

2026-02-23

Weaknesses

CWE-74, CWE-77

Affected products

• Di-8200g (D-link)
• Di-8200g Firmware (Dlink)

References

• https://github.com/DavCloudz/cve/blob/main/D-link/DI_8200G/DI_8200G%20V17.12.20A1%20Command%20Execution%20Vulnerability…
• https://github.com/DavCloudz/cve/blob/main/D-link/DI_8200G/DI_8200G%20V17.12.20A1%20Command%20Execution%20Vulnerability…
• https://vuldb.com/?ctiid.340129
• https://vuldb.com/?id.340129
• https://vuldb.com/?submit.733275
• https://www.dlink.com/