Vulnerability · Published Jan 8, 2026 · Assigned by VulDB
CVE-2026-0732D-Link DI-8200G upgrade_filter.asp command injection
Medium 6.3
In plain English
A medium-severity command injection in DI-8200G from D-Link. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 11.7% (higher than 96% of all known vulnerabilities).
Severity (CVSS 3.1)6.3Medium
Exploit odds (30 days)11.7%top 3.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A vulnerability was found in D-Link DI-8200G 17.12.20A1. This affects an unknown function of the file /upgrade_filter.asp. The manipulation of the argument path results in command injection. The attack may be performed from remote. The exploit has been made public and could be used.
Affected products (as reported)
Weakness: CWE-77, CWE-74 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-340129 | D-Link DI-8200G upgrade_filter.asp command injection vdb-entry, technical-description
- VDB-340129 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #733275 | D-Link DI_8200G Router V17.12.20A1 Command Execution third-party-advisory
- https://github.com/DavCloudz/cve/blob/main/D-link/DI_8200G/DI_8200G%20V17.12.20A1%20Command%20Execution%20Vulnerability/readme.md related
- https://github.com/DavCloudz/cve/blob/main/D-link/DI_8200G/DI_8200G%20V17.12.20A1%20Command%20Execution%20Vulnerability/readme.md#poc exploit
- https://www.dlink.com/ product