CVE-2022-26258VulnerabilityPublished 09/08/2022Updated 10/24/2026
CVE-2022-26258: D-Link DIR-820L Remote Code Execution Vulnerability
Affects D-Link DIR-820LSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 09/08/2022
- KEV deadline
- 09/29/2022
- EPSS
- 91.6% chance of exploitation in 30 days – higher than 99% of CVEs
What to do
CISA required action
The impacted product is end-of-life and should be disconnected if still in use.
Description
D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which allows for remote code execution.