CVE-2025-9752

5.5 mediumEPSS 17%

A security vulnerability has been detected in D-Link DIR-852 1.00CN B09. Impacted is the function soapcgi_main of the file soap.cgi of the component SOAP Service. Such manipulation of the argument service leads to os command injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Severity

CVSS 4.0

5.5 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 17% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWEs: CWE-78, CWE-77
Published: 2025-09-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dlink:dir-852_firmware

References

https://github.com/i-Corner/cve/issues/18
https://vuldb.com/?ctiid.322053
https://vuldb.com/?id.322053
https://vuldb.com/?submit.640590
https://www.dlink.com/

Check your stack JSON