Approved changes feed: RSS · Atom

cpe:2.3:a:d-link:dir-825:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorD Link (f324da99-07b9-589f-a800-1ce04a08f309)
ProductDir 825 (37e9115e-d1f4-522e-b70e-5f347e3ddb49)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-7069 vulnerable 2026-06-08 08:07:05.353477 D-Link DIR-825 miniupnpd upnpsoap.c AddPortMapping buffer overflow
HIGH (8)
A security flaw has been discovered in D-Link DIR-825 up to 3.00b32. This impacts the function AddPortMapping of the file upnpsoap.c of the component miniupnpd. Performing a manipulation of the argument NewPortMappingDescription results in buffer overflow. The attack needs to be approached within the local network. The exploit has been released to the public and may be used for attacks. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2026-04-27T00:00:25.159Z
Updated: 2026-04-27T13:30:27.953Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7068 vulnerable 2026-06-08 08:07:05.347143 D-Link DIR-825 nmbd sserver.c NMBD_process buffer overflow
HIGH (8.8)
A vulnerability was identified in D-Link DIR-825 3.00b32. This affects the function NMBD_process of the file sserver.c of the component nmbd. Such manipulation leads to buffer overflow. The attack can only be initiated within the local network. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2026-04-26T23:45:14.462Z
Updated: 2026-04-27T13:02:41.891Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4627 vulnerable 2026-06-08 08:05:13.625871 D-Link DIR-825/DIR-825R NTP Service libdeuteron_modules.so handler_update_system_time os command injection
HIGH (7.2)
A vulnerability was found in D-Link DIR-825 and DIR-825R 1.0.5/4.5.1. Affected is the function handler_update_system_time of the file libdeuteron_modules.so of the component NTP Service. The manipulation results in os command injection. The attack may be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2026-03-24T03:32:49.354Z
Updated: 2026-03-24T13:33:31.838Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8949 vulnerable 2026-06-08 07:45:21.492472 D-Link DIR-825 httpd ping_response.cgi get_ping_app_stat stack-based overflow
HIGH (7.2)
A vulnerability was identified in D-Link DIR-825 2.10. Affected by this vulnerability is the function get_ping_app_stat of the file ping_response.cgi of the component httpd. The manipulation of the argument ping_ipaddr leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-08-14T07:02:09.338Z
Updated: 2025-08-14T19:40:07.439Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7206 vulnerable 2026-06-08 07:43:18.146978 D-Link DIR-825 httpd switch_language.cgi sub_410DDC stack-based overflow
CRITICAL (9.8)
A vulnerability, which was classified as critical, has been found in D-Link DIR-825 2.10. This issue affects the function sub_410DDC of the file switch_language.cgi of the component httpd. The manipulation of the argument Language leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-07-08T23:32:06.224Z
Updated: 2025-07-09T13:14:14.731Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6292 vulnerable 2026-06-08 07:43:14.767504 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6291 vulnerable 2026-06-08 07:43:14.764783 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10666 vulnerable 2026-06-08 07:02:27.283762 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10034 vulnerable 2026-06-08 07:02:26.190063 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0717 vulnerable 2026-06-08 06:22:01.847924 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43647 vulnerable 2026-06-08 05:49:33.665520 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43646 vulnerable 2026-06-08 05:49:33.664962 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43645 vulnerable 2026-06-08 05:49:33.664233 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43644 vulnerable 2026-06-08 05:49:33.663705 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43643 vulnerable 2026-06-08 05:49:33.663108 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43642 vulnerable 2026-06-08 05:49:33.659487 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.