CVE-2026-15270

EUVD-2026-42692
A weakness has been identified in D-link DIR-823G 1.0.2B05_20181207. Affected by this vulnerability is an unknown functionality of the file /etc/boa/boa.conf of the component Web Interface. Executing a manipulation can lead to least privilege violation. The attack can be launched remotely. The attack requires a high level of complexity. The exploitation appears to be difficult. The exploit has been made available to the public and could be used for attacks.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 37.05%
Affected Products (NVD)
VendorProductVersion
dlinkdir-823g_firmware
1.0.2b05_20181207:b05_20181207
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://app.notion.com/p/DIR823G-V1-0-2B05_20181207-37a1f5ba989080f2a043c60d2cfc7499?source=copy_link
https://vuldb.com/cve/CVE-2026-15270
https://vuldb.com/submit/852314
https://vuldb.com/vuln/377213
https://vuldb.com/vuln/377213/cti
https://www.dlink.com/