CVE-2026-2227 | D-Link DCS-931L up to 1.13.0 /setSystemAdmin doSystem AdminID command injection

A vulnerability marked as critical has been reported in D-Link DCS-931L up to 1.13.0. Impacted is the function doSystem of the file /setSystemAdmin. Performing a manipulation of the argument AdminID results in command injection. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability was named CVE-2026-2227. The attack may be initiated remotely. In addition, an exploit is available.