CVE-2022-26258 — D-Link DIR-820L Remote Code Execution Vulnerability

CVE-2022-26258

CRITICAL · CVSS 9.8 ⚠ KEV — EXPLOITED

EPSS exploitation probability: 100%

⚠ Listed in the CISA Known Exploited Vulnerabilities catalog — actively exploited.

Published 2022-09-08 · Last modified 2026-07-06T12:39:52.090

Summary

D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.

D-Link — DIR-820L

Add your gear to cvedb and we'll alert you only when D-Link ships something exploited.

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.