D-Link DIR-820L Remote Code Execution Vulnerability

CRITICAL 9.8EXPLOITED (CISA KEV)CVE-2022-26258 · Published 28/03/2022 · updated 09/07/2026

D-Link DIR-820L Remote Code Execution Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 08/09/2022. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
DIR-820L D-Link	Versions not published yet (product named by CISA KEV)

Description

D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.

References

skyedai910/Vuln · Broken Link
zhizhuoshuma/cve_info_data · Exploit
dlink.com/en/security-bulletin · Not Applicable
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2022-26258

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free