D-Link G416 nodered chmod command injection remote code execution vulnerability

The D-Link G416 is the AX1500 4G+ Smart Router launched by AUO in June 2025 and supports Wi-Fi 6, AI Smart Optimization and 4G LTE Cat 6 network with up to 300Mbps internet speed. The D-Link G416 suffers from a command injection remote code execution vulnerability, which stems from a nodered chmo...

The vulnerability of the nodered chmod function in D-Link G416 router software allows a hacker to execute arbitrary code.

The vulnerability of the nodered chmod function in D-Link G416 router microprogramming systems is related to the failure to take measures to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by...