CVE-2026-82595
HighCVSS 7.4Summary
A vulnerability was found in D-Link DIR-825M 1.1.8 in the function sub_456CF4 of /boafrm/formSysCmd in the System Command Execution component. Manipulation of the sysCmd argument results in command injection. The attack can be initiated remotely and the exploit is public.
Risk Assessment
Remote command execution on the router could allow an attacker to gain full control over the device and network.
Recommendation
It is recommended to update the router firmware to the latest version if available, and restrict access to the administrative interface.
Other vulnerabilities in D-Link DIR-825M
See all- CVE-2026-82593Critical
A flaw was found in D-Link DIR-825M 1.1.8 in the sub_41802C function of /boafrm/formLtefotaUpgradeFibocom, related to LTE module firmware upgrade. Manipulation of the fota_url argument causes a stack-based buffer overflow. The attack can be carried out remotely, and the exploit has been published.
- CVE-2026-82592Critical
A vulnerability was detected in D-Link DIR-825M 1.1.8. It affects the function sub_46725C in the file /boafrm/formDiskFormat of the Disk Formatting Handler Endpoint. Manipulation of the argument partition results in a stack-based buffer overflow. The attack can be executed remotely, and the exploit is public.
Original NVD description (English source)
A vulnerability was found in D-Link DIR-825M 1.1.8. Affected by this vulnerability is the function sub_456CF4 of the file /boafrm/formSysCmd of the component System Command Execution. Performing a manipulation of the argument sysCmd results in command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.