CVE-2025-8956

2.1 lowEPSS 23%

Low (2.1) in dlink dir-818l firmware. EPSS 23% chance of exploitation in the next 30 days.

A vulnerability was found in D-Link DIR‑818L up to 1.05B01. This issue affects the function getenv of the file /htdocs/cgibin of the component ssdpcgi. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Severity

CVSS 4.0

2.1 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 23% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWEs: CWE-74, CWE-77
Published: 2025-08-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dlink:dir-818l_firmware

References

https://github.com/LonTan0/CVE/blob/main/Remote%20Arbitrary%20Command%20Execution%20Vulnerability%20in%20ssdpcgi%20of%20D-Link%20DIR%E2%80%91818L.md
https://vuldb.com/?ctiid.319925
https://vuldb.com/?id.319925
https://vuldb.com/?submit.627835
https://www.dlink.com/

Check your stack JSON