CVE-2025-29635
A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to…
Published: 2025-03-25 · CVSS: 7.2 · CVSS 3.1
A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function, triggering remote command execution.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7