CVE-2025-11100
- EPSS 0.09%
- Published 28.09.2025 07:15:30
- Last modified 02.10.2025 18:57:37
A vulnerability was identified in D-Link DIR-823X 250416. This affects the function uci_set of the file /goform/set_wifi_blacklists. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit is publicly a...
CVE-2025-11099
- EPSS 0.09%
- Published 28.09.2025 06:15:36
- Last modified 02.10.2025 18:57:46
A vulnerability was determined in D-Link DIR-823X 250416. The impacted element is the function uci_del of the file /goform/delete_prohibiting. This manipulation of the argument delvalue causes command injection. It is possible to initiate the attack ...
CVE-2025-11098
- EPSS 0.09%
- Published 28.09.2025 06:15:36
- Last modified 02.10.2025 18:57:53
A vulnerability was found in D-Link DIR-823X 250416. The affected element is an unknown function of the file /goform/set_wifi_blacklists. The manipulation of the argument macList results in command injection. The attack may be performed from remote. ...
CVE-2025-11097
- EPSS 0.09%
- Published 28.09.2025 05:15:31
- Last modified 02.10.2025 18:58:00
A vulnerability has been found in D-Link DIR-823X 250416. Impacted is an unknown function of the file /goform/set_device_name. The manipulation of the argument mac leads to command injection. The attack is possible to be carried out remotely. The exp...
CVE-2025-11096
- EPSS 0.09%
- Published 28.09.2025 05:15:30
- Last modified 02.10.2025 19:02:45
A flaw has been found in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/diag_traceroute. Executing manipulation of the argument target_addr can lead to command injection. The attack can be executed remotely. Th...
CVE-2025-11095
- EPSS 0.09%
- Published 28.09.2025 04:15:42
- Last modified 02.10.2025 19:06:34
A vulnerability was detected in D-Link DIR-823X 250416. This vulnerability affects unknown code of the file /goform/delete_offline_device. Performing manipulation of the argument delvalue results in command injection. Remote exploitation of the attac...
CVE-2025-11092
- EPSS 0.09%
- Published 28.09.2025 03:15:30
- Last modified 02.10.2025 19:06:44
A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub_412E7C of the file /goform/set_switch_settings. This manipulation of the argument port causes command injection. The attack may be initiated remotely...
CVE-2025-55848
- EPSS 0.03%
- Published 26.09.2025 17:15:36
- Last modified 03.10.2025 19:29:28
An issue was discovered in DIR-823 firmware 20250416. There is an RCE vulnerability in the set_cassword settings interface, as the http_casswd parameter is not filtered by '&'to allow injection of reverse connection commands.
CVE-2025-10814
- EPSS 0.09%
- Published 22.09.2025 21:15:58
- Last modified 24.09.2025 18:42:26
A vulnerability was determined in D-Link DIR-823X 240126/240802/250416. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/goahead. This manipulation of the argument port causes command injection. The attack can be initi...
CVE-2025-10634
- EPSS 0.08%
- Published 18.09.2025 01:02:15
- Last modified 24.09.2025 18:42:57
A weakness has been identified in D-Link DIR-823X 240126/240802/250416. The impacted element is the function sub_412E7C of the file /usr/sbin/goahead of the component Environment Variable Handler. This manipulation of the argument terminal_addr/serve...