CVE-2026-2218

MEDIUM SEVERITY

CVSS Score & Metrics

Base Score

6.3 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L                                    

Vulnerability Description

A vulnerability was determined in D-Link DCS-933L up to 1.14.11. This affects an unknown function of the file /setSystemAdmin of the component alphapd. This manipulation of the argument AdminID causes command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. This vulnerability only affects products that are no longer supported by the maintainer.

Vulnerability Details

Published Date

February 09, 2026

Last Modified

February 11, 2026

CWE ID

CWE-74

Source

NVD

Vendor

dlink

Product

dcs-933l_firmware

External References

https://github.com/jinhao118/cve/blob/main/D-Link%20DCS933L_v1.14.11.md
https://github.com/jinhao118/cve/blob/main/D-Link%20DCS933L_v1.14.11.md#poc
https://vuldb.com/?ctiid.344936
https://vuldb.com/?id.344936
https://vuldb.com/?submit.753247
https://www.dlink.com/

CVE-2026-2218

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment