← Database

CVE-2026-7288

HIGH CVSS: 8.8 Published: 2026-04-28 Modified: 2026-06-17

Description

A vulnerability has been found in D-Link DIR-825M 1.1.12. This vulnerability affects the function sub_4151FC of the file /boafrm/formVpnConfigSetup. The manipulation of the argument submit-url leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

Affected Platforms

Dlink Dir-825M FirmwareDlink Dir-825M

Weakness Type

CWE-119, CWE-120

References