CVE-2026-7067
A vulnerability was determined in D-Link DIR-822 A_101. The impacted element is the function system of the file /udhcpcd/dhcpd.c of the component udhcpd DHCP Service. This manipulation of the argument Hostname causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. This vulnerability only affects products that are no longer supported by the maintainer.
- Affected products
- Dir-822
- Dlink dir-822 Firmware
- = 1.0.1
- CVSS 2.0
- 7.5 HIGH
- CVSS 3.1
- 7.3 HIGH
- EPSS
- 2.5% (83th percentile)
- Weakness
- CWE-74, CWE-77
- NVD status
- Analyzed
- Published
- 2026-04-26
CVE-2026-7067 at NVD
No indexed exploits for CVE-2026-7067 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2026-7067 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.