CVE-2026-0732 | Severity.io

Description

A vulnerability was found in D-Link DI-8200G 17.12.20A1. This affects an unknown function of the file /upgrade_filter.asp. The manipulation of the argument path results in command injection. The attack may be performed from remote. The exploit has been made public and could be used.

Related CPE's

di-8200g_firmware

Vulnerable

References

https://github.com/DavCloudz/cve/blob/main/D-link/DI_8200G/DI_8200G%20V17.12.20A1%20Command%20Execution%20Vulnerability/readme.md

ExploitThird Party Advisory

https://github.com/DavCloudz/cve/blob/main/D-link/DI_8200G/DI_8200G%20V17.12.20A1%20Command%20Execution%20Vulnerability/readme.md#poc

ExploitThird Party Advisory

https://vuldb.com/?ctiid.340129

Permissions RequiredVDB Entry

https://vuldb.com/?id.340129

Third Party AdvisoryVDB Entry

https://vuldb.com/?submit.733275

Third Party AdvisoryVDB Entry

https://www.dlink.com/

Product

Weaknesses

[email protected]

Primary

CWE-74CWE-77

[email protected]

Primary

CWE-77

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

6.3 · Medium

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2026-01-09T00:15:45.313Z

5 days ago

Last modified

2026-01-14T18:57:15.960Z

2 hours ago