Advisories · Technology

D-Link DIR-825.

Every CVE that names D-Link DIR-825 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-96891 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

D-Link DIR-825 rp-l2tp tunnel.c tunnel_set_params out-of-bounds write
- D-Link DIR-825
- Memory corruption
Not analysed yet 24 Sept 2026
CVE-2026-7069 CVE record

CVSS 8.6 High

D-Link DIR-825 miniupnpd upnpsoap.c AddPortMapping buffer overflow
- D-Link DIR-825
- Memory corruption
Not analysed yet 27 Apr 2026
CVE-2026-7068 CVE record

CVSS 8.7 High

D-Link DIR-825 nmbd sserver.c NMBD_process buffer overflow
- D-Link DIR-825
- Memory corruption
Not analysed yet 26 Apr 2026
CVE-2026-4627 CVE record

CVSS 8.6 High

D-Link DIR-825/DIR-825R NTP Service libdeuteron_modules.so handler_update_system_time os command injection
- D-Link DIR-825
- D-Link DIR-825R
- Command injection
Not analysed yet 24 Mar 2026
CVE-2025-10666 CVE record

CVSS 8.7 High

D-Link DIR-825 apply.cgi sub_4106d4 buffer overflow
- D-Link DIR-825
- Memory corruption
Not analysed yet 18 Sept 2025
CVE-2025-10034 CVE record

CVSS 8.7 High

D-Link DIR-825 httpd ping6_response.cg get_ping6_app_stat buffer overflow
- D-Link DIR-825
- Memory corruption
Not analysed yet 6 Sept 2025
CVE-2025-8949 CVE record

CVSS 8.6 High

D-Link DIR-825 httpd ping_response.cgi get_ping_app_stat stack-based overflow
- D-Link DIR-825
- Memory corruption
Not analysed yet 14 Aug 2025
CVE-2025-7206 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

D-Link DIR-825 httpd switch_language.cgi sub_410DDC stack-based overflow
- D-Link DIR-825
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-6292 CVE record

CVSS 8.7 High

D-Link DIR-825 HTTP POST Request sub_4091AC stack-based overflow
- D-Link DIR-825
- Memory corruption
Not analysed yet 20 Jun 2025
CVE-2025-6291 CVE record

CVSS 8.7 High

D-Link DIR-825 HTTP POST Request do_file stack-based overflow
- D-Link DIR-825
- Memory corruption
Not analysed yet 20 Jun 2025
CVE-2024-0717 CVE record

CVSS 5.3 Medium

D-Link Good Line Router v2 HTTP GET Request devinfo information disclosure
- D-Link DAP-1360
- D-Link DIR-300
- Information disclosure
Not analysed yet 19 Jan 2024
CVE-2022-43647 CVE record

CVSS 8.8 High

OS command injection in D-Link DIR-825
- D-Link DIR-825
- Command injection
Not analysed yet 29 Mar 2023
CVE-2022-43646 CVE record

CVSS 8.8 High

OS command injection in D-Link DIR-825
- D-Link DIR-825
- Command injection
Not analysed yet 29 Mar 2023
CVE-2022-43645 CVE record

CVSS 8.8 High

OS command injection in D-Link DIR-825
- D-Link DIR-825
- Command injection
Not analysed yet 29 Mar 2023
CVE-2022-43644 CVE record

CVSS 8.8 High

OS command injection in D-Link DIR-825
- D-Link DIR-825
- Command injection
Not analysed yet 29 Mar 2023
CVE-2022-43643 CVE record

CVSS 8.8 High

OS command injection in D-Link DIR-825
- D-Link DIR-825
- Command injection
Not analysed yet 29 Mar 2023
CVE-2022-43642 CVE record

CVSS 8.8 High

OS command injection in D-Link DIR-825
- D-Link DIR-825
- Command injection
Not analysed yet 29 Mar 2023