Vulnerability · Published Jul 9, 2026 · Assigned by VulDB

CVE-2026-15270D-link DIR-823G Web boa.conf least privilege violation

High 7.5

In plain English

A high-severity security flaw in DIR-823G from D-link. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 58% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.9%top 41.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A weakness has been identified in D-link DIR-823G 1.0.2B05_20181207. Affected by this vulnerability is an unknown functionality of the file /etc/boa/boa.conf of the component Web Interface. Executing a manipulation can lead to least privilege violation. The attack can be launched remotely. The attack requires a high level of complexity. The exploitation appears to be difficult. The exploit has been made available to the public and could be used for attacks.

Affected products (as reported)

Vendor	Product	Versions
D-link	DIR-823G	1.0.2B05_20181207

Weakness: CWE-272, CWE-266 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R

References

VDB-377213 | D-link DIR-823G Web boa.conf least privilege violation vdb-entry
VDB-377213 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
CVE-2026-15270 | CVE Analysis and Report third-party-advisory
Submit #852314 | D-link DIR823G DIR823G V1.0.2B05_20181207 Misconfiguration in DIR823G third-party-advisory
https://app.notion.com/p/DIR823G-V1-0-2B05_20181207-37a1f5ba989080f2a043c60d2cfc7499?source=copy_link exploit
https://www.dlink.com/ product