CVE-2026-1125

5.5 mediumEPSS 16%

Medium (5.5) in dlink dir-823x firmware. EPSS 16% chance of exploitation in the next 30 days.

A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub_412E7C of the file /goform/set_wifidog_settings. Executing a manipulation of the argument wd_enable can lead to command injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.

Severity

CVSS 4.0

5.5 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 16% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWEs: CWE-77, CWE-74
Published: 2026-01-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dlink:dir-823x_firmware

References

https://github.com/DavCloudz/cve/blob/main/D-link/DIR_823X/DIR-823X%20V250416%20Command%20Execution%20Vulnerability.md
https://vuldb.com/?ctiid.341717
https://vuldb.com/?id.341717
https://vuldb.com/?submit.734966
https://vuldb.com/?submit.743503

Check your stack JSON