CVE-2025-11099 : faille élevée dlink dir-823x firmware (CVSS 8.8)

A vulnerability was determined in D-Link DIR-823X 250416. The impacted element is the function uci_del of the file /goform/delete_prohibiting. This manipulation of the argument delvalue causes command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

Sévérité

Élevée (CVSS 8.8)

Vecteur CVSS

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitation active

Non signalée par la CISA

Publication

28 sept. 2025

Dernière mise à jour

17 juin 2026

• dlink dir-823x firmware

• Fiche CVE-2025-11099 sur le NVD (NIST)
• github.com/n1ptune/dink/blob/main/uci_del_in_delete_prohi…
• vuldb.com/
• vuldb.com/
• vuldb.com/
• dlink.com/