D-Link DIR-825M vulnerabilities
3 known CVE vulnerabilities in D-Link DIR-825M, translated and rated.
- CVE-2026-82595High
A vulnerability was found in D-Link DIR-825M 1.1.8 in the function sub_456CF4 of /boafrm/formSysCmd in the System Command Execution component. Manipulation of the sysCmd argument results in command injection. The attack can be initiated remotely and the exploit is public.
- CVE-2026-82593Critical
A flaw was found in D-Link DIR-825M 1.1.8 in the sub_41802C function of /boafrm/formLtefotaUpgradeFibocom, related to LTE module firmware upgrade. Manipulation of the fota_url argument causes a stack-based buffer overflow. The attack can be carried out remotely, and the exploit has been published.
- CVE-2026-82592Critical
A vulnerability was detected in D-Link DIR-825M 1.1.8. It affects the function sub_46725C in the file /boafrm/formDiskFormat of the Disk Formatting Handler Endpoint. Manipulation of the argument partition results in a stack-based buffer overflow. The attack can be executed remotely, and the exploit is public.