CVE-2022-26258
D-Link DIR-820L 1.05B03 was discovered to contain a remote command execution (RCE) vulnerability...
D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.
- Record
CVE-2022-26258- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-78
- Updated
- 2026-11-02
CVE List
D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.
- Record
CVE-2022-26258- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-78
- Updated
- 2026-11-02
EUVDEUVD-2022-30821
D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.
- Record
EUVD-2022-30821- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-qf97-3r3x-x56v
D-Link DIR-820L 1.05B03 was discovered to contain a remote command execution (RCE) vulnerability...
D-Link DIR-820L 1.05B03 was discovered to contain a remote command execution (RCE) vulnerability via the Device Name parameter in /lan.asp.
- Record
GHSA-qf97-3r3x-x56v- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-78
- Updated
- 2026-11-02
CISA KEV No score
D-Link DIR-820L Remote Code Execution Vulnerability
D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which allows for remote code execution.
- Record
CVE-2022-26258- Weakness
- CWE-78
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| exploitation | ||
| first indexed | CVE List, EUVD, GitHub Advisories, CISA KEV, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-26258 is a critical vulnerability (CVSS 9.8) in D-link Dir-820l, published March 27, 2022. CISA lists it as known to be exploited, since September 8, 2022. EUVD reports exploitation since September 8, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 91.6%, the 99th percentile. No source names a fixed version.
References
dlink.com/en/security-bulletin
github.com/skyedai910/Vuln/tree/master/DIR-820L/command_execution_0
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-26258
nvd.nist.gov/vuln/detail/CVE-2022-26258
dir-820l.com
dlink.com