dir-822 vulnerabilities

3 known vulnerabilities in dir-822 from D-Link. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  DIR-822: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-7067Apr 27, 2026D-LinkEPSS 2.72%

  A vulnerability was determined in D-Link DIR-822 A_101. The impacted element is the function system of the file /udhcpcd/dhcpd.c of the component udhcpd DHCP Service. This manipulation of the argument Hostname causes command injection. The attack can be initia

• 9.8 Critical severity

  dir-822: Improper Neutralization of Special Elements used in a Command

  CVE-2024-33344Apr 26, 2024D-LinkEPSS 19.9%

  D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of upload_firmware.cgi, which allows remote attackers to execute arbitrary commands via shell.

• 7.5 High severity

  dir-822: Improper Neutralization of Special Elements used in a Command

  CVE-2024-33342Apr 26, 2024D-LinkEPSS 1.56%

  D-Link DIR-822+ V1.0.5 was found to contain a command injection in SetPlcNetworkpwd function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell.