CVE-2026-0732

Опубликовано: 09 янв. 2026

Источник: nvd

CVSS3: 6.3

CVSS3: 9.8

CVSS2: 6.5

EPSS Низкий

Описание

A vulnerability was found in D-Link DI-8200G 17.12.20A1. This affects an unknown function of the file /upgrade_filter.asp. The manipulation of the argument path results in command injection. The attack may be performed from remote. The exploit has been made public and could be used.

Ссылки

https://github.com/DavCloudz/cve/blob/main/D-link/DI_8200G/DI_8200G%20V17.12.20A1%20Command%20Execution%20Vulnerability/readme.md
Exploit
Third Party Advisory
https://github.com/DavCloudz/cve/blob/main/D-link/DI_8200G/DI_8200G%20V17.12.20A1%20Command%20Execution%20Vulnerability/readme.md#poc
Exploit
Third Party Advisory
https://vuldb.com/?ctiid.340129
Permissions Required
VDB Entry
https://vuldb.com/?id.340129
Third Party Advisory
VDB Entry
https://vuldb.com/?submit.733275
Third Party Advisory
VDB Entry
https://www.dlink.com/
Product

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:dlink:di-8200g_firmware:17.12.20a1:*:*:*:*:*:*:*

cpe:2.3:h:dlink:di-8200g:-:*:*:*:*:*:*:*

EPSS

Процентиль: 48%

0.00251

Низкий

6.3 Medium

CVSS3

9.8 Critical

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-74

CWE-77

Связанные уязвимости

GHSA-w56p-x8x5-446c

CVSS3: 6.3

github

30 дней назад

EPSS

Процентиль: 48%

0.00251

Низкий

6.3 Medium

CVSS3

9.8 Critical

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-74

CWE-77