CVE-2022-26258 — D-Link DIR-820L Remote Code Execution

Netvigilance • October 11, 2026

Share: View original

CISA deadline 2022-09-29 · passed 4 years ago · applies to US federal civilian agencies; used elsewhere as a reference SLA

D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which allows for remote code execution.

D-Link DIR-820L . Affected version ranges are listed in the vendor advisory and the NVD entry linked under Sources.

Weakness class: CWE-78.

2022-09-08 Added to CISA KEV Exploitation in the wild confirmed by CISA

2022-09-29 CISA remediation deadline passed 4 years ago

NVD entry for CVE-2022-26258 nvd.nist.gov/vuln/detail/CVE-2022-26258

CISA Known Exploited Vulnerabilities catalog

supportannouncement.us.dlink.com supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10295

nvd.nist.gov nvd.nist.gov/vuln/detail/CVE-2022-26258

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Remote Code Execution Vulnerabilities in D-Link Devices Two vulnerabilities have been identified in D-Link devices, CVE-2022-26258 and CVE-2019-16057, both allowing remote code execution. CVE-2022-26258 affects the D-Link DIR-820L router, while CVE-2019-16057 impacts the D-Link DNS-320 storage device. Both vulnerabilities have a CVSS score of 9.8, categorizing them as. CISA confirmed exploitation in the wild for both vulnerabilities, with CVE-2022-26258 added to the KEV catalog on September 8, 2022, and CVE-2019-16057 on April 15, 2022. The CISA remediation deadlines for both vulnerabilities have long passed, raising concerns about devices. Affected organizations include US federal civilian agencies and other users of these D-Link products. The vulnerabilities stem from issues in the device's web management interfaces, allowing attackers to execute arbitrary code remotely. Users are urged to apply patches and secure their devices against potential exploitation. 2 sources 84

Extracted Entities

CVEs (1)

CWE Weaknesses (1)

CWE-78 - OS Command Injection

Domains (2)

nvd.nist.gov supportannouncement.us.dlink.com