CVE-2026-82593
CriticalCVSS 9.9Summary
A flaw was found in D-Link DIR-825M 1.1.8 in the sub_41802C function of /boafrm/formLtefotaUpgradeFibocom, related to LTE module firmware upgrade. Manipulation of the fota_url argument causes a stack-based buffer overflow. The attack can be carried out remotely, and the exploit has been published.
Risk Assessment
A remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service, potentially leading to full compromise of the router and network integrity.
Recommendation
Check for and apply any firmware updates from the vendor. If no patch is available, restrict access to the administrative interface and monitor network traffic.
Other vulnerabilities in D-Link DIR-825M
See all- CVE-2026-82595High
A vulnerability was found in D-Link DIR-825M 1.1.8 in the function sub_456CF4 of /boafrm/formSysCmd in the System Command Execution component. Manipulation of the sysCmd argument results in command injection. The attack can be initiated remotely and the exploit is public.
- CVE-2026-82592Critical
A vulnerability was detected in D-Link DIR-825M 1.1.8. It affects the function sub_46725C in the file /boafrm/formDiskFormat of the Disk Formatting Handler Endpoint. Manipulation of the argument partition results in a stack-based buffer overflow. The attack can be executed remotely, and the exploit is public.
Original NVD description (English source)
A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LTE Module Firmware Upgrade. This manipulation of the argument fota_url causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used.