D-Link DIR-823X firmware - 240126 was discovered to contain a remote command execution (RCE) vulnerability via the dhcpd_startip parameter at /goform/set_lan_settings.
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')