CVE-2026-11492: D-Link DIR-823G vsftpd vsftpd.conf least privilege violation

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2026-06-08 · updated 2026-07-23
Weakness: CWE-266

Description

A security flaw has been discovered in D-Link DIR-823G 1.0.2B05. The affected element is an unknown function of the file /etc/vsftpd.conf of the component vsftpd. Performing a manipulation results in least privilege violation. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.

Affected products

D-Link DIR-823G: 1.0.2b05

References

https://vuldb.com/cve/CVE-2026-11492
https://vuldb.com/submit/834816
https://vuldb.com/vuln/369112
https://vuldb.com/vuln/369112/cti
https://www.dlink.com/
https://www.notion.so/D-Link-DIR823G-V1-0-2B05_20181207-3671f5ba989080ac97fdc36d2fb5e57d?source=copy_link

Get alerted when CVE-2026-11492 or the next vulnerability affects your stack