CVE-2026-2218 | D-Link DCS-933L up to 1.14.11 alphapd /setSystemAdmin AdminID command injection

A vulnerability has been found in D-Link DCS-933L up to 1.14.11 and classified as critical. This affects an unknown function of the file /setSystemAdmin of the component alphapd. This manipulation of the argument AdminID causes command injection. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is registered as CVE-2026-2218. Remote exploitation of the attack is possible. Furthermore, an exploit is available.