← Database

CVE-2025-11099

MEDIUM CVSS: 6.3 Published: 2025-09-28 Modified: 2026-06-17

Description

A vulnerability was determined in D-Link DIR-823X 250416. The impacted element is the function uci_del of the file /goform/delete_prohibiting. This manipulation of the argument delvalue causes command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

Affected Platforms

Dlink Dir-823X FirmwareDlink Dir-823X

Weakness Type

CWE-74, CWE-77

References