CVE-2026-2143 – D-Link DIR-823X DDNS Service set_ddns os command injection

CVE ID : CVE-2026-2143

Published : Feb. 8, 2026, 8:32 a.m. | 47 minutes ago

Description : A security vulnerability has been detected in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/set_ddns of the component DDNS Service. The manipulation of the argument ddnsType/ddnsDomainName/ddnsUserName/ddnsPwd leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…