CVE-2026-11492D-Link DIR-823G vsftpd vsftpd.conf least privilege violation

Descripción

A security flaw has been discovered in D-Link DIR-823G 1.0.2B05. The affected element is an unknown function of the file /etc/vsftpd.conf of the component vsftpd. Performing a manipulation results in least privilege violation. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• VDB-369112 | D-Link DIR-823G vsftpd vsftpd.conf least privilege violation vdb-entryThird Party AdvisoryVDB Entry
• VDB-369112 | CTI Indicators (IOB, IOC, TTP, IOA) signaturepermissions-requiredPermissions RequiredVDB Entry
• CVE-2026-11492 | CVE Analysis and Report third-party-advisoryThird Party AdvisoryVDB Entry
• Submit #834816 | D-Link DIR823G V1.0.2B05_20181207 Misconfiguration third-party-advisoryThird Party AdvisoryVDB Entry
• https://www.notion.so/D-Link-DIR823G-V1-0-2B05_20181207-3671f5ba989080ac97fdc36d2fb5e57d?source=copy_link exploitExploitVendor Advisory
• https://www.dlink.com/ productProduct