CVE-2026-15270

HIGH

D-link DIR-823G Web boa.conf least privilege violation

Title source: cna
STIX 2.1

Description

A weakness has been identified in D-link DIR-823G 1.0.2B05_20181207. Affected by this vulnerability is an unknown functionality of the file /etc/boa/boa.conf of the component Web Interface. Executing a manipulation can lead to least privilege violation. The attack can be launched remotely. The attack requires a high level of complexity. The exploitation appears to be difficult. The exploit has been made available to the public and could be used for attacks.

References (6)

Core 6
Core References
Vdb Entry vdb-entry
VDB-377213 | D-link DIR-823G Web boa.conf least privilege violation
https://vuldb.com/vuln/377213
Signature, Permissions Required signature permissions-required
VDB-377213 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/vuln/377213/cti
Third Party Advisory third-party-advisory
CVE-2026-15270 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-15270
Third Party Advisory third-party-advisory
Submit #852314 | D-link DIR823G DIR823G V1.0.2B05_20181207 Misconfiguration in DIR823G
https://vuldb.com/submit/852314
Product product
https://www.dlink.com/

Scores

CVSS v3 7.5
EPSS 0.0037
EPSS Percentile 28.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-266 CWE-272
Status published
Products (2)
D-link/DIR-823G 1.0.2B05_20181207
dlink/dir-823g_firmware 1.0.2b05_20181207
Published Jul 09, 2026
Tracked Since Jul 10, 2026