CVE-2026-82592
CriticalCVSS 9.9Exploitation Probability (EPSS)
Elevated risk53th percentile - higher than 53% of all known CVEs
Summary
A vulnerability was detected in D-Link DIR-825M 1.1.8. It affects the function sub_46725C in the file /boafrm/formDiskFormat of the Disk Formatting Handler Endpoint. Manipulation of the argument partition results in a stack-based buffer overflow. The attack can be executed remotely, and the exploit is public.
Risk Assessment
A remote attacker can exploit this vulnerability to cause a buffer overflow, potentially leading to arbitrary code execution or device crash, compromising the router's integrity and availability.
Recommendation
Apply available patches or update the D-Link DIR-825M firmware to the latest version. Restrict access to the administrative panel and management interfaces to trusted networks only.
Other vulnerabilities in D-Link DIR-825M
See all- CVE-2026-82593Critical
A flaw was found in D-Link DIR-825M 1.1.8 in the sub_41802C function of /boafrm/formLtefotaUpgradeFibocom, related to LTE module firmware upgrade. Manipulation of the fota_url argument causes a stack-based buffer overflow. The attack can be carried out remotely, and the exploit has been published.
- CVE-2026-82595High
A vulnerability was found in D-Link DIR-825M 1.1.8 in the function sub_456CF4 of /boafrm/formSysCmd in the System Command Execution component. Manipulation of the sysCmd argument results in command injection. The attack can be initiated remotely and the exploit is public.
Original NVD description (English source)
A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the file /boafrm/formDiskFormat of the component Disk Formatting Handler Endpoint. The manipulation of the argument partition results in stack-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS