CVE-2026-8345 Details

A command injection vulnerability has been identified in the D-Link DIR-816 router, specifically in firmware version 1.10CNB05_R1B011D88210. The issue arises in the 'singlePortForward' form handler, where the 'ip_address' parameter is inadequately validated. The vulnerability allows for remote exploitation, as the flawed validation process only checks if the IP address is parseable, without sanitizing it for safe use in shell commands. Once a malicious 'ip_address' is accepted, it is stored in the router's NVRAM and later executed as part of an iptables command, creating a persistent command injection flaw that can be exploited at any time.