Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-82595

D-Link DIR-825M System Command Execution formSysCmd sub_456CF4 command injection

Description

A vulnerability was found in D-Link DIR-825M 1.1.8. Affected by this vulnerability is the function sub_456CF4 of the file /boafrm/formSysCmd of the component System Command Execution. Performing a manipulation of the argument sysCmd results in command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

D-Link DIR-825M

  • 1.1.8affected

References