CVE-2026-15270
Received Received - Intake

Least Privilege Violation in D-Link DIR-823G Web Interface

Publication date: 2026-07-09

Last updated on: 2026-07-09

Assigner: VulDB

Description
A weakness has been identified in D-link DIR-823G 1.0.2B05_20181207. Affected by this vulnerability is an unknown functionality of the file /etc/boa/boa.conf of the component Web Interface. Executing a manipulation can lead to least privilege violation. The attack can be launched remotely. The attack requires a high level of complexity. The exploitation appears to be difficult. The exploit has been made available to the public and could be used for attacks.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-09
Last Modified
2026-07-09
Generated
2026-07-10
AI Q&A
2026-07-09
EPSS Evaluated
N/A
NVD
CVE-2026-15270
EUVD
EUVD-2026-42692

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
d-link dir-823g 1.0.2b05_20181207

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-272 The elevated privilege level required to perform operations such as chroot() should be dropped immediately after the operation is performed.
CWE-266 A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects the D-link DIR-823G device, specifically an unknown functionality within the file /etc/boa/boa.conf related to the Web Interface component. It allows an attacker to perform a manipulation that leads to a least privilege violation, meaning the attacker can gain higher privileges than intended.

The attack can be launched remotely but requires a high level of complexity, making exploitation difficult. However, the exploit has been made publicly available, increasing the risk of attacks.

Impact Analysis

Exploitation of this vulnerability can lead to a least privilege violation, which means an attacker could gain unauthorized elevated access to the device's web interface.

This elevated access could potentially allow the attacker to manipulate device settings, access sensitive information, or disrupt normal device operations.

Since the attack can be performed remotely, it increases the risk of unauthorized access from outside the local network.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-15270. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart