What is the CVSS score of CVE-2026-2210?

CVE-2026-2210 has a CVSS 3.1 base score of 7.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Dir 823x Firmware are affected by CVE-2026-2210?

A high-severity vulnerability affecting D-Link DIR-823X routers allows remote attackers to exploit the /goform/set_filtering function with a public exploit available.

Is there a public PoC exploit available for CVE-2026-2210?

Yes, a public proof-of-concept exploit is available for CVE-2026-2210. Prioritise patching immediately. EPSS: 0.2%.

How to fix or mitigate CVE-2026-2210?

Within 24 hours: Inventory all D-Link DIR-823X devices in production and isolate or restrict network access to affected units if operationally feasible. Within 7 days: Implement network segmentation to limit lateral movement from compromised devices and deploy WAF rules to block /goform/set_filtering requests from untrusted sources. Within 30 days: Replace affected DIR-823X devices with patched alternatives or vendor-approved models, monitor for indicators of compromise, and conduct security assessment of potentially affected network segments.

Dir 823x Firmware CVE-2026-2210

HIGH

Command Injection (CWE-77)

2026-02-09 cna@vuldb.com

D-Link Command Injection Dir 823x Firmware

7.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.2 HIGH

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

PoC Detected

Feb 11, 2026 - 18:36 vuln.today

Public exploit code

CVE Published

Feb 09, 2026 - 03:16 nvd

HIGH 7.2

DescriptionCVE.org

A vulnerability has been found in D-Link DIR-823X 250416. This affects the function sub_4211C8 of the file /goform/set_filtering. Such manipulation leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

AnalysisAI

D-Link DIR-823X firmware versions up to 250416 contain an OS command injection vulnerability in the /goform/set_filtering function that allows remote attackers with high privileges to execute arbitrary commands with full system access. Public exploit code exists for this vulnerability, and no patch is currently available. The attack requires network access and administrative credentials but carries high confidentiality, integrity, and availability impact.

Technical ContextAI

Classified as CWE-77 (Command Injection). Affects Dir-823X Firmware. A vulnerability has been found in D-Link DIR-823X 250416. This affects the function sub_4211C8 of the file /goform/set_filtering. Such manipulation leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.