Known Exploited Vulnerabilities April 24, 2026 · CISA KEV Catalog

CVE-2025-29635: D-Link DIR-823X Command Injection Vulnerability

D-Link DIR-823X contains a command injection vulnerability that allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2025-29635 D-Link
Related: CVE-2022-37055: D-Link Routers Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Dec 08, 2025
CVE-2022-40799: D-Link DNR-322L Download of Code Without Integrity Check Vulnerability Known Exploited Vulnerabilities · Aug 05, 2025
CVE-2020-25079: D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability Known Exploited Vulnerabilities · Aug 05, 2025