Which versions of D-Link are affected by CVE-2026-4193?

D-Link DIR-823G routers running version 1.0.2B05 contain a critical access control vulnerability affecting multiple administrative functions, enabling unauthorized remote configuration changes.

How to fix or mitigate CVE-2026-4193?

Within 24 hours: Inventory all DIR-823G 1.0.2B05 devices and isolate them from production networks if possible; enable enhanced logging on affected devices. Within 7 days: Implement network segmentation to restrict administrative access to these routers; deploy WAF rules to block suspicious requests to vulnerable endpoints; consider disabling remote management capabilities. Within 30 days: Replace affected D-Link routers with supported, patched alternatives; evaluate network architecture to eliminate reliance on end-of-life equipment.

D-Link CVE-2026-4193

Q: What is the CVSS score of CVE-2026-4193?

CVE-2026-4193 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-12257 MEDIUM

Incorrect Privilege Assignment (CWE-266)

2026-03-16 cna@vuldb.com

D-Link Information Disclosure

5.5

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

CVSS changed

Apr 29, 2026 - 01:11 NVD

6.9 (MEDIUM) 5.5 (MEDIUM)

EUVD ID Assigned

Mar 16, 2026 - 14:30 euvd

EUVD-2026-12257

Analysis Generated

Mar 16, 2026 - 14:30 vuln.today

CVE Published

Mar 16, 2026 - 14:20 nvd

MEDIUM 6.9

DescriptionCVE.org

A security vulnerability has been detected in D-Link DIR-823G 1.0.2B05. The affected element is the function GetDDNSSettings/GetDeviceDomainName/GetDeviceSettings/GetDMZSettings/GetFirewallSettings/GetGuestNetworkSettings/GetLanWanConflictInfo/GetLocalMacAddress/GetNetworkSettings/GetQoSSettings/GetRouterInformationSettings/GetRouterLanSettings/GetWanSettings/SetAccessCtlList/SetAccessCtlSwitch/SetDeviceSettings/SetGuestWLanSettings/SetIPv4FirewallSettings/SetNetworkSettings/SetNetworkTomographySettings/SetNTPServerSettings/SetRouterLanSettings/SetStaticClientInfo/SetStaticRouteSettings/SetWLanRadioSecurity/SetWPSSettings/UpdateClientInfo of the component goahead. Such manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

AnalysisAI

Improper access control in D-Link DIR-823G 1.0.2B05's goahead component allows unauthenticated remote attackers to manipulate multiple configuration functions including firewall, network, and security settings. The vulnerability affects a wide range of device management functions and has been publicly disclosed with no patch currently available. Affected organizations should implement network segmentation and access controls to limit exposure to this remotely exploitable flaw.

Technical ContextAI

The vulnerability affects the goahead embedded web server component in D-Link DIR-823G routers, specifically in numerous functions handling device configuration including GetDDNSSettings, SetWLanRadioSecurity, SetIPv4FirewallSettings, and over 20 other administrative functions. This is classified as CWE-266 (Incorrect Privilege Assignment), where the system improperly grants elevated privileges or fails to enforce access restrictions on these critical configuration endpoints. The goahead server is a lightweight embedded web server commonly used in IoT devices and routers for providing web-based management interfaces.

RemediationAI

Since D-Link no longer supports the DIR-823G router, no security patches will be released for this vulnerability. Organizations must replace affected DIR-823G devices with currently supported router models immediately. As a temporary mitigation until replacement, restrict network access to the router's web interface to trusted IP addresses only, disable remote management features if enabled, and ensure the device is not directly exposed to the internet. Monitor for suspicious access attempts to the affected configuration endpoints listed in the vulnerability description.