CVE-2026-2081 | D-Link DIR-823X 250416 /goform/set_password http_passwd os command injection

A vulnerability identified as critical has been detected in D-Link DIR-823X 250416. The affected element is an unknown function of the file /goform/set_password. This manipulation of the argument http_passwd causes os command injection.

This vulnerability is tracked as CVE-2026-2081. The attack is possible to be carried out remotely. Moreover, an exploit is present.