CVE-2022-26258
Published 2022-03-28 · Updated 2026-07-09 · Source cve@mitre.org
Summary
CVE-2022-26258 is a critical-severity (CVSS 9.8) vulnerability in D-Link DIR-820L. CISA added it to the Known Exploited Vulnerabilities catalog on September 8, 2022, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by September 29, 2022. CISA does not currently list it as used in ransomware campaigns. D-Link has 26 vulnerabilities in the KEV catalog, 2 of them linked to ransomware.
All 26 known-exploited D-Link vulnerabilities →Description
D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA Known-Exploited Vulnerability
Product: D-Link — DIR-820L
Name: D-Link DIR-820L Remote Code Execution Vulnerability
Date added: 2022-09-08 · Due: 2022-09-29
Required action: The impacted product is end-of-life and should be disconnected if still in use.
References
- https://github.com/skyedai910/Vuln/tree/master/DIR-820L/command_execution_0
- https://github.com/zhizhuoshuma/cve_info_data/blob/ccaed4b94ba762eb8a8e003bfa762a7754b8182e/Vuln/Vuln/DIR-820L/command_execution_0/README.md
- https://www.dlink.com/en/security-bulletin/
- https://github.com/skyedai910/Vuln/tree/master/DIR-820L/command_execution_0
- https://github.com/zhizhuoshuma/cve_info_data/blob/ccaed4b94ba762eb8a8e003bfa762a7754b8182e/Vuln/Vuln/DIR-820L/command_execution_0/README.md
- https://www.dlink.com/en/security-bulletin/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-26258