CVE-2026-2157 | D-Link DIR-823X 250416 set_static_route_table sub_4175CC interface/destip/netmask/gateway/metric os command injection

A vulnerability labeled as critical has been found in D-Link DIR-823X 250416. This affects the function sub_4175CC of the file /goform/set_static_route_table. Such manipulation of the argument interface/destip/netmask/gateway/metric leads to os command injection.

This vulnerability is listed as CVE-2026-2157. The attack may be performed from remote. In addition, an exploit is available.