FAIL › dossier
dir-820l
PRODUCT· dossier confidence 20%
The D-Link DIR-820L wireless router is a networking product with a critical security track record. It suffered multiple high-severity remote code execution vulnerabilities in 2022 that were left unpatched, allowing attackers to execute arbitrary commands via HTTP POST requests to the device's management interface.
PROFILE
CategorynetworkingWhat they doD-Link DIR-820L is a wireless router product.
Websitehttps://www.dlink.com ↗
SECURITY POSTURE
The DIR-820L has a documented history of critical remote code execution (RCE) vulnerabilities that remained unpatched for extended periods, exposing the device to exploitation via HTTP POST requests.
Notable failures
- CVE-2022-26258 RCE via HTTP POST
- CVE-2022-26258 unpatched RCE
- Critical RCE in firmware 1.05B03
Patterns: repeated unpatched edge-device RCEs; delayed firmware updates for consumer hardware
FAILURE HISTORY · 2
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2022-09-08 | CVE-2022-26258 | high | D-Link DIR-820L exposed to RCE due to unpatched vulnerability |
| 2022-03-28 | CVE-2022-26258 | critical | D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp. |
DOSSIER SOURCES
- CISA Patch Mandate Guide: CVE-2026-3502 Compliance & CIRCIA ... · www.aigovhub.io
- CVE-2026-82592 | Critical Severity | Armis · cve.armis.com
- Newest Questions - Stack Overflow · stackoverflow.com
Open questions: D-Link's broader patch management timeline for the DIR-820L · Whether other D-Link products share similar unpatched RCE vulnerabilities
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-03 03:57:33.294241+00:00