D-Link DIR-816命令注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-26810
• https://nvd.nist.gov/vuln/detail/CVE-2025-5620
• https://nvd.nist.gov/vuln/detail/CVE-2025-5621
• https://nvd.nist.gov/vuln/detail/CVE-2025-44835
• https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10433
• https://www.sentinelone.com/vulnerability-database/cve-2026-8346/
• https://www.iotsec-zone.com/article/213
• https://avd.aliyun.com/detail?id=AVD-2026-8346
• https://github.com/z1r00/IOT_Vul/blob/main/dlink/Dir816/SystemCommand/readme.md
• https://github.com/advisories/GHSA-j6wp-hqmg-gx4g
• https://avd.aliyun.com/product?prod=dir-816
• https://www.z1r0.top/2022/07/28/D-Link-Dir-816-A2%E8%B7%AF%E7%94%B1%E5%99%A8%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/
• https://github.com/advisories/GHSA-2mfw-8h6x-jgc4

Related Vulnerabilities

• PoCCVE-2025-29635: D-Link DIR-823X set_prohibiting - Command Injection
• D-Link NAS /cgi-bin/account_mgr.cgi 命令执行漏洞（CVE-2024-10915）
• PoCdlink-dsl2600u-rom0-disclosure: D-Link DSL2600U - Unauthenticated rom-0 Configuration Disclosure
• D-Link DNS-ShareCenter /cgi-bin/gui_mgr.cgi 命令执行漏洞（CVE-2026-4204）
• D-Link DNS-ShareCenter /cgi-bin/download_mgr.cgi 命令执行漏洞（CVE-2026-4197）
• PoCD-Link DNS-ShareCenter /cgi-bin/webdav_mgr.cgi 命令执行漏洞（CVE-2024-8132）
• PoCD-Link DNS-ShareCenter /cgi-bin/app_mgr.cgi 命令执行漏洞（CVE-2026-4205）
• D-Link DNS-ShareCenter /cgi-bin/apkg_mgr.cgi 命令执行漏洞（CVE-2024-8131）
• D-Link DNS-ShareCenter /cgi-bin/network_mgr.cgi 命令执行漏洞（CVE-2026-4203）
• D-Link DNS-ShareCenter /cgi-bin/time_machine.cgi 命令执行漏洞（CVE-2026-4210）
• D-Link DNS-ShareCenter /cgi-bin/remote_backup.cgi 命令执行漏洞（CVE-2026-4196）
• D-Link DNS-ShareCenter /cgi-bin/s3.cgi 命令执行漏洞（CVE-2024-8129）
• D-Link DNS-ShareCenter /cgi-bin/webfile_mgr.cgi 命令执行漏洞（CVE-2024-8128）