CVE-2025-11092: D-Link DIR-823X set_switch_settings sub_412E7C command injection

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-09-28 · updated 2026-10-09
Weakness: CWE-74

Description

A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub_412E7C of the file /goform/set_switch_settings. This manipulation of the argument port causes command injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.

Affected products

D-Link DIR-823X: 250416

References

https://github.com/maximdevere/CVE2/issues/4
https://vuldb.com/?ctiid.326174
https://vuldb.com/?id.326174
https://vuldb.com/?submit.661809
https://www.dlink.com/
https://github.com/maximdevere/CVE2/issues/4

Get alerted when CVE-2025-11092 or the next vulnerability affects your stack