D-Link DIR-822 CVE-2026-7067

Q: What is the CVSS score of CVE-2026-7067?

CVE-2026-7067 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.8%.

MEDIUM

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') (CWE-74)

2026-04-27 cna@vuldb.com

Command Injection D-Link

5.5

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

CVSS changed

Apr 29, 2026 - 01:12 NVD

6.9 (MEDIUM) 5.5 (MEDIUM)

Analysis Generated

Apr 27, 2026 - 00:30 vuln.today

Analysis Generated

Apr 27, 2026 - 00:22 vuln.today

CVE Published

Apr 27, 2026 - 00:16 nvd

MEDIUM 5.5

DescriptionCVE.org

A vulnerability was determined in D-Link DIR-822 A_101. The impacted element is the function system of the file /udhcpcd/dhcpd.c of the component udhcpd DHCP Service. This manipulation of the argument Hostname causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. This vulnerability only affects products that are no longer supported by the maintainer.

AnalysisAI

Command injection in D-Link DIR-822 A_101 udhcpd DHCP service allows remote unauthenticated attackers to execute arbitrary commands via a malicious Hostname parameter in DHCP requests. The vulnerability affects an end-of-life product with publicly disclosed exploit code available, creating significant risk for organizations unable to migrate away from legacy hardware.

Technical ContextAI

The vulnerability exists in the udhcpd DHCP service component, specifically in the argument handling of the system function within /udhcpcd/dhcpd.c. The Hostname parameter processed by the DHCP server is not properly sanitized before being passed to a system call, allowing an attacker to inject shell metacharacters and arbitrary commands. This is a classic command injection flaw (CWE-74: Improper Neutralization of Special Elements used in an OS Command) where user-controlled input reaches a command execution context without proper escaping or validation.

RemediationAI

No vendor-released patch exists for DIR-822 A_101 due to end-of-life status. Organizations must immediately discontinue use of this device for critical network services and replace it with a supported D-Link router or alternative vendor hardware running current firmware. If immediate replacement is impossible, implement network-level compensating controls: restrict DHCP traffic at the network perimeter by blocking inbound DHCP requests (UDP port 67) from untrusted network segments or WAN interfaces - only allow DHCP from trusted ISP-provided DHCP servers on WAN and from internal DHCP pools on LAN. Additionally, segment the DIR-822 to a limited-purpose VLAN if DHCP functionality is required, and monitor that VLAN for suspicious shell command patterns in DHCP requests. These controls mitigate but do not eliminate risk; they require maintained network discipline and do not protect against attacks from already-compromised LAN devices.