PT-2026-83844

Subject::new for owner in the zbus polkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer D-Bus type u, whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer D-Bus type i. Because of this type mismatch, polkit...

CVE-2026-82692: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in D-Link DNS-340L and DNS-345 up to 20260717. This affects an unknown part of the file /cgi-bin/iscsimgr.cgi. Performing a manipulation of the argument alias/username/password/volumelocation results in os command injection. It is possible to initiate the attack remotely...

PT-2026-83779

Name of the Vulnerable Software and Affected Versions D-Link DNS-340L version 1.01B04 D-Link DNS-340L version 1.03B06 D-Link DNS-340L version 1.04.B02 D-Link DNS-340L version 1.05b04 D-Link DNS-345 version 1.01B04 D-Link DNS-345 version 1.03B06 D-Link DNS-345 version 1.04.B02 D-Link DNS-345 versi...

CVE-2026-82595

CVE-2026-82595 is a command injection vulnerability in D-Link DIR-825M firmware version 1.1.8 , located in the System Command Execution component (file /boafrm/formSysCmd, function sub_456CF4). Manipulating the sysCmd argument allows an authenticated remote attacker to inject and execute arbitrar...

CVE-2026-82595 D-Link DIR-825M System Command Execution formSysCmd sub_456CF4 command injection

A vulnerability was found in D-Link DIR-825M 1.1.8. Affected by this vulnerability is the function sub456CF4 of the file /boafrm/formSysCmd of the component System Command Execution. Performing a manipulation of the argument sysCmd results in command injection. It is possible to initiate the atta...

CVE-2026-82595 D-Link DIR-825M System Command Execution formSysCmd sub_456CF4 command injection

A vulnerability was found in D-Link DIR-825M 1.1.8. Affected by this vulnerability is the function sub456CF4 of the file /boafrm/formSysCmd of the component System Command Execution. Performing a manipulation of the argument sysCmd results in command injection. It is possible to initiate the atta...

CVE-2026-82592

A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub46725C of the file /boafrm/formDiskFormat of the component Disk Formatting Handler Endpoint. The manipulation of the argument partition results in stack-based buffer overflow. The attack can be executed remotely...

CVE-2026-82593 D-Link DIR-825M LTE Module Firmware Upgrade formLtefotaUpgradeFibocom sub_41802C stack-based overflow

A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LTE Module Firmware Upgrade. This manipulation of the argument fotaurl causes stack-based buffer overflow. The attack is possible to be carried out...

CVE-2026-82593 D-Link DIR-825M LTE Module Firmware Upgrade formLtefotaUpgradeFibocom sub_41802C stack-based overflow

A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LTE Module Firmware Upgrade. This manipulation of the argument fotaurl causes stack-based buffer overflow. The attack is possible to be carried out...

CVE-2026-82593

A stack-based buffer overflow exists in the D-Link DIR-825M router (firmware v1.1.8), specifically in function sub_41802C within the file /boafrm/formLtefotaUpgradeFibocom of the LTE Module Firmware Upgrade component. The root cause is improper handling of the fota_url argument, enabling a remote...

CVE-2026-82592

A stack-based buffer overflow in the D-Link DIR-825M (firmware 1.1.8) affects the Disk Formatting Handler Endpoint at /boafrm/formDiskFormat (function sub_46725C). By manipulating the partition argument, an authenticated remote attacker can trigger the overflow. The vulnerability is rated CVSS 3....

CVE-2026-82592 D-Link DIR-825M Disk Formatting Handler Endpoint formDiskFormat sub_46725C stack-based overflow

A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub46725C of the file /boafrm/formDiskFormat of the component Disk Formatting Handler Endpoint. The manipulation of the argument partition results in stack-based buffer overflow. The attack can be executed remotely...

CVE-2026-82592 D-Link DIR-825M Disk Formatting Handler Endpoint formDiskFormat sub_46725C stack-based overflow

A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub46725C of the file /boafrm/formDiskFormat of the component Disk Formatting Handler Endpoint. The manipulation of the argument partition results in stack-based buffer overflow. The attack can be executed remotely...

SUSE-SU-2026:23405-1 Security update for udisks2

This update for udisks2 fixes the following issue: - CVE-2026-7867: insufficient authorization checks on the as-user option in the org.freedesktop.UDisks2.Filesystem.Mount D-Bus method can lead to local privilege escalation bsc1274430...

OPENSUSE-SU-2026:21704-1 Security update for udisks2

This update for udisks2 fixes the following issue: - CVE-2026-7867: insufficient authorization checks on the as-user option in the org.freedesktop.UDisks2.Filesystem.Mount D-Bus method can lead to local privilege escalation bsc1274430...

PT-2026-83564

Name of the Vulnerable Software and Affected Versions D-Link DIR-825M version 1.1.8 Description A stack-based buffer overflow occurs in the Disk Formatting Handler Endpoint when processing the /boafrm/formDiskFormat endpoint. The issue is triggered by the manipulation of the partition argument...

PT-2026-83566

Name of the Vulnerable Software and Affected Versions D-Link DIR-825M version 1.1.8 Description A command injection issue exists in the System Command Execution component. A remote attacker can manipulate the sysCmd argument within the sub 456CF4 function of the /boafrm/formSysCmd endpoint to...

PT-2026-83634

Name of the Vulnerable Software and Affected Versions D-Link DSM-G600 version 1.01 Description A weakness in the Multipart Handler component allows a remote attacker to perform an out-of-bounds write. This occurs through the manipulation of the /load file.cgi endpoint. An out-of-bounds write is a...

PT-2026-83565

Name of the Vulnerable Software and Affected Versions D-Link DIR-825M version 1.1.8 Description A stack-based buffer overflow occurs in the LTE Module Firmware Upgrade component. The issue resides in the sub 41802C function within the /boafrm/formLtefotaUpgradeFibocom file. A remote attacker can...

CVE-2026-82592: Stack-based Buffer Overflow

A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub46725C of the file /boafrm/formDiskFormat of the component Disk Formatting Handler Endpoint. The manipulation of the argument partition results in stack-based buffer overflow. The attack can be executed remotely...