CVE-2026-8344 - Vulnerability Analysis

Overview

D-Link DIR-816 1.10CNB05_R1B011D88210 contains a command injection caused by manipulation of the sub_445E7C function in /goform/formDMZ.cgi, letting remote attackers execute arbitrary commands, exploit requires no special privileges.

Severity & Score

Impact

Remote attackers can execute arbitrary commands, potentially leading to full system compromise.

Mitigation

Update to the latest firmware version.

References

• https://vuldb.com/vuln/362660/cti
• https://www.dlink.com/
• https://github.com/lipenghai/iot_bug/blob/main/D-Link/DIR816/1.md
• https://vuldb.com/submit/811378
• https://vuldb.com/vuln/362660

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner