CVE-2026-15270

Katalog CVE

CVSS 7.5 · High EPSS 0,85%

Kerentanan Incorrect Privilege Assignment pada dlink dir-823g firmware. Skor CVSS 3.1 7.5 (High) menurut vuldb.com.

Deskripsi (NVD)

A weakness has been identified in D-link DIR-823G 1.0.2B05_20181207. Affected by this vulnerability is an unknown functionality of the file /etc/boa/boa.conf of the component Web Interface. Executing a manipulation can lead to least privilege violation. The attack can be launched remotely. The attack requires a high level of complexity. The exploitation appears to be difficult. The exploit has been made available to the public and could be used for attacks.

Rincian

Terbit di NVD

9 Juli 2026

Terakhir diubah

3 September 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber vuldb.com
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-266: Incorrect Privilege Assignment
CWE-272: Least Privilege Violation

EPSS (30 hari)

0,85% peluang dieksploitasi; lebih tinggi dari 57,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://app.notion.com/p/DIR823G-V1-0-2B05_20181207-37a1f5ba989080f2a043c60d2cfc7499?source=copy_link advisory pihak ketiga
• https://vuldb.com/cve/CVE-2026-15270 advisory pihak ketiga · vdb entry
• https://vuldb.com/submit/852314 advisory pihak ketiga · vdb entry
• https://vuldb.com/vuln/377213 advisory pihak ketiga · vdb entry
• https://vuldb.com/vuln/377213/cti permissions required · vdb entry
• https://www.dlink.com/ product