Is CVE-2023-5148 actively exploited?

Yes. CVE-2023-5148 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, which means exploitation in the wild has been confirmed.

Can CVE-2023-5148 be exploited remotely?

The attack vector of CVE-2023-5148 has not been classified yet.

What is the CVSS score of CVE-2023-5148?

CVE-2023-5148 has not received a CVSS score yet.

HOME VULNERABILITIESCVE-2023-5148

UNKNOWNCISA KEVIN THE WILD

CVE-2023-5148

Published: April 11, 2026

Official Description

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231. It has been declared as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php. The manipulation of the argument file_upload leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-240244. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.

NVD Source

Technical Analysis

CVE-2023-5148 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CISA has added CVE-2023-5148 to the Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild. U.S. federal agencies are required to patch this within the mandated timeframe, and all organizations should treat remediation as urgent.