CVE-2026-2260

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

A vulnerability was found in D-Link DCS-931L up to 1.13.0. This affects an unknown part of the file /goform/setSysAdmin. The manipulation of the argument AdminID results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77 CWE-78

Affected software

No affected versions have been published.

Timeline

Published: Feb 10, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-226009.1OpenProject is an open-source, web-based project management software. A Local File Read (LFR) vulnerability exists in the work package PDF e CVE-2026-226017.2OpenProject is an open-source, web-based project management software. For OpenProject version 16.6.1 and below, a registered administrator c CVE-2026-226023.5OpenProject is an open-source, web-based project management software. Prior to version 16.6.2, a low‑privileged logged-in user can view the CVE-2026-226036.5OpenProject is an open-source, web-based project management software. Prior to version 16.6.2, OpenProject’s unauthenticated password-change CVE-2026-226045.3OpenProject is an open-source, web-based project management software. For OpenProject versions from 11.2.1 to before 16.6.2, when sending a CVE-2026-226054.3OpenProject is an open-source, web-based project management software. OpenProject versions prior to version 16.6.3, allowed users with the V CVE-2026-226067.8Fickling is a Python pickling decompiler and static analyzer. Fickling versions up to and including 0.1.6 do not treat Python’s runpy module CVE-2026-226077.8Fickling is a Python pickling decompiler and static analyzer. Fickling versions up to and including 0.1.6 do not treat Python's cProfile mod CVE-2026-226087.8Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, both ctypes and pydoc modules aren't explicitly blocke CVE-2026-226097.8Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, the unsafe_imports() method in Fickling's static analy CVE-2026-22617.5Due to a programming error, blocklistd leaks a socket descriptor for each adverse event report it receives. Once a certain number of leaked CVE-2026-226106.1Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to