VulnCheck KEV: CVE-2025-14208

A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub415028 of the file /goform/setwansettings. The manipulation of the argument pppusername results in command injection. It is possible to launch the attack remotely. The exploit has been released to...

CVE-2026-86296: Stack-based Buffer Overflow

A vulnerability was determined in D-Link DIR-822A A101. This vulnerability affects the function strcpy of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicl...

CVE-2026-86295: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in D-Link DIR-895L A1102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. The manipulation of the argument Hostname results in command injection. The attack can be executed remotely. The exploit has been made public and...

PT-2026-86965

A flaw has been found in D-Link DIR-895L A1 102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published a...

PT-2026-86966

Name of the Vulnerable Software and Affected Versions D-Link DIR-822A A 101 Description A remote out-of-bounds write can occur within the L2TP Control Message Parser component. This issue is triggered by the tunnel set params function, allowing an attacker to write data beyond the allocated memor...

CVE-2026-86297: Off-by-one Error

A vulnerability was identified in D-Link DIR-605 B1v202WWB03. This issue affects the function tunnelsetparams of the file progs.gpl/pppd.alpha/l2tp/tunnel.c of the component L2TP Control Message Parser. Such manipulation of the argument peerhostname leads to off-by-one. The attack may be performe...

PT-2026-86570

A vulnerability was identified in D-Link DIR-605 B1v202WWB03. This issue affects the function tunnel set params of the file progs.gpl/pppd.alpha/l2tp/tunnel.c of the component L2TP Control Message Parser. Such manipulation of the argument peer hostname leads to off-by-one. The attack may be...

PT-2026-86569

Name of the Vulnerable Software and Affected Versions D-Link DIR-822A version A 101 Description A stack-based buffer overflow exists in the udhcpcd component. The issue occurs within the strcpy function located in the udhcpcd/serverpacket.c file. This flaw allows a remote, unauthenticated attacke...

PT-2026-86568

Name of the Vulnerable Software and Affected Versions D-Link DIR-895L version A1 102b07 Description A remote command injection issue exists within the udhcpcd component. The flaw is located in the sendACK function of the udhcpcd/serverpacket.c file. An attacker can execute arbitrary commands...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053263)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053263 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix possible deadlock between unlink and dioendiowrite ocfs2unlink takes orphan dir...

VulnCheck KEV: CVE-2025-60698

A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1FW102B02 within the prog.cgi and rc binaries. The sub432F60 function in prog.cgi stores user-supplied SetSysLogSettings/IPAddress values in NVRAM via nvramsafeset"SysLogRemoteIPAddress", .... These values are...

The vulnerability of the sub_41802C() function in the /boafrm/formLtefotaUpgradeFibocom file of the LTE Module Firmware Upgrade component of the D-Link DIR-825M router’s microprogramming system allows a intruder to execute arbitrary code.

The vulnerability of the sub41802C function in the /boafrm/formLtefotaUpgradeFibocom file of the LTE Module Firmware Upgrade component of the D-Link DIR-825M router’s microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability coul...

The vulnerability of the sub_46725C() function in the /boafrm/formDiskFormat file of the Disk Formatting Handler Endpoint component of the D-Link DIR-825M microprogramming device, which allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the sub46725C function in the /boafrm/formDiskFormat file of the Disk Formatting Handler Endpoint component of the D-Link DIR-825M microprogramming router lies in the fact that the output of the operation is stored outside of the buffer in memory. Exploiting this vulnerabilit...

The vulnerability of the sub_424D20() function in D-link DIR-823X router microprogramming software allows a hacker to execute any command they desire.

The vulnerability of the sub424D20 function /goform/setipv6 of the D-link DIR-823X router’s microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute...

Exploit for CVE-2026-82592

D-Link Router DIR-825M - Buffer Overflow in /boafrm/formDiskFo...

EUVD-2026-68298

A vulnerability was found in D-Link DIR-825M 1.1.8. Affected by this vulnerability is the function sub456CF4 of the file /boafrm/formSysCmd of the component System Command Execution. Performing a manipulation of the argument sysCmd results in command injection. It is possible to initiate the atta...

EUVD-2026-68296

A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LTE Module Firmware Upgrade. This manipulation of the argument fotaurl causes stack-based buffer overflow. The attack is possible to be carried out...

EUVD-2026-68295

A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub46725C of the file /boafrm/formDiskFormat of the component Disk Formatting Handler Endpoint. The manipulation of the argument partition results in stack-based buffer overflow. The attack can be executed remotely...

CVE-2026-82595

A vulnerability was found in D-Link DIR-825M 1.1.8. Affected by this vulnerability is the function sub456CF4 of the file /boafrm/formSysCmd of the component System Command Execution. Performing a manipulation of the argument sysCmd results in command injection. It is possible to initiate the atta...

CVE-2026-82593

A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LTE Module Firmware Upgrade. This manipulation of the argument fotaurl causes stack-based buffer overflow. The attack is possible to be carried out...