CVE-2026-2163 | D-Link DIR-600 up to 2.15WWb02 ssdp.cgi HTTP_ST/REMOTE_ADDR/REMOTE_PORT/SERVER_ID command injection

A vulnerability, which was classified as critical, was found in D-Link DIR-600 up to 2.15WWb02. This vulnerability affects unknown code of the file ssdp.cgi. Such manipulation of the argument HTTP_ST/REMOTE_ADDR/REMOTE_PORT/SERVER_ID leads to command injection. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is traded as CVE-2026-2163. The attack may be launched remotely. Furthermore, there is an exploit available.