CVE-2026-2120 | D-Link DIR-823X 250416 Configuration Parameter set_server_settings terminal_addr/server_ip/server_port os command injection

A vulnerability classified as critical has been found in D-Link DIR-823X 250416. This affects an unknown function of the file /goform/set_server_settings of the component Configuration Parameter Handler. The manipulation of the argument terminal_addr/server_ip/server_port leads to os command injection.

This vulnerability is listed as CVE-2026-2120. The attack may be initiated remotely. In addition, an exploit is available.