PT-2025-33471 · D Link · D-Link Dir-860L

Ic0Rner · Published 2025-08-15 · Updated 2025-08-15 · CVE-2025-9026

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: D-Link DIR-860L version 2.04.B04

Description: A vulnerability exists in the Simple Service Discovery Protocol component of the D-Link DIR-860L router. The issue is due to a command injection flaw within the ssdpcgi main function located in the /htdocs/cgibin file. This allows for remote execution of operating system commands. The exploit for this issue has been publicly disclosed. This vulnerability affects products that are no longer supported by the maintainer.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

BDU:2025-10096

CVE-2025-9026

Affected Products

D-Link Dir-860L

References · 12

• 🔥 https://github.com/i-Corner/cve/issues/17 · Exploit
• https://bdu.fstec.ru/vul/2025-10096 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-9026 · Security Note
• https://osv.dev/vulnerability/CVE-2025-9026 · Vendor Advisory
• https://vuldb.com/?submit.629946 · Note
• https://t.me/CVEtracker/30116 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1956450691448254782 · Twitter Post
• https://vuldb.com/?id.320091 · Note
• https://vuldb.com/?ctiid.320091 · Note
• https://twitter.com/CVEnew/status/1956390300135395536 · Twitter Post
• https://dlink.com · Note
• https://t.me/cveNotify/132414 · Telegram Post