CVE-2026-15270

HIGH 7.5

D-link DIR-823G Web boa.conf least privilege violation

CVSS Score

7.5

EPSS Score

0.4%

EPSS Percentile

29th

A weakness has been identified in D-link DIR-823G 1.0.2B05_20181207. Affected by this vulnerability is an unknown functionality of the file /etc/boa/boa.conf of the component Web Interface. Executing a manipulation can lead to least privilege violation. The attack can be launched remotely. The attack requires a high level of complexity. The exploitation appears to be difficult. The exploit has been made available to the public and could be used for attacks.

CWE	CWE-272 CWE-266
Vendor	d-link
Product	dir-823g
Published	Jul 9, 2026
Last Updated	Jul 10, 2026

Stay Ahead of the Next One

Get instant alerts for d-link dir-823g

Be the first to know when new high vulnerabilities affecting d-link dir-823g are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

D-link / DIR-823G

1.0.2B05_20181207

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/377213 vuldb.com: https://vuldb.com/vuln/377213/cti vuldb.com: https://vuldb.com/cve/CVE-2026-15270 vuldb.com: https://vuldb.com/submit/852314 app.notion.com: https://app.notion.com/p/DIR823G-V1-0-2B05_20181207-37a1f5ba989080f2a043c60d2cfc7499?source=copy_link dlink.com: https://www.dlink.com/

Credits

🔍 L-14 (VulDB User)