CVE-2025-11837

Name of the Vulnerable Software and Affected Versions Malware Remover versions prior to 6.6.8.20251023

Description Improper control of code generation in the malware remover component allows remote attackers to perform code injection and remote code execution. This flaw can be exploited to bypass protection mechanisms. In real-world incidents, the AryStinger botnet has utilized this and other flaws to compromise over 4,000 end-of-life D-Link routers, transforming them into a distributed scanning and proxy infrastructure for malicious traffic and hijacking DNS to intercept network traffic.

Recommendations Update to version 6.6.8.20251023 or later.