High severity · published Aug 30, 2026
CVE-2026-82595
D-Link DIR-825M System Command Execution formSysCmd sub_456CF4 command injection
7.4
CVSS
4.4%
EPSS
No
On KEV
Description
A vulnerability was found in D-Link DIR-825M 1.1.8. Affected by this vulnerability is the function sub_456CF4 of the file /boafrm/formSysCmd of the component System Command Execution. Performing a manipulation of the argument sysCmd results in command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)4.4% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DI
DIR-825M · D-Link
1.1.8 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-82595
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-82595
github.com
https://github.com/Robots10/IoT_vlu/blob/main/reports/Dlink/formSysCmd/formSysCmd.md
vuldb.com
https://vuldb.com/cve/CVE-2026-82595
vuldb.com
https://vuldb.com/submit/892630
vuldb.com
https://vuldb.com/vuln/397090
vuldb.com
https://vuldb.com/vuln/397090/cti
www.dlink.com
https://www.dlink.com/
More from DIR-825M
9.9
CVE-2026-82593
D-Link DIR-825M LTE Module Firmware Upgrade formLtefotaUpgradeFibocom sub_41802C stack-based overflow
9.9
CVE-2026-82592
D-Link DIR-825M Disk Formatting Handler Endpoint formDiskFormat sub_46725C stack-based overflow
8.8
CVE-2026-7289
D-Link DIR-825M formWanConfigSetup sub_414BA8 buffer overflow
8.8
CVE-2026-7288
D-Link DIR-825M formVpnConfigSetup sub_4151FC buffer overflow