Dir-825 firmware

This hub aggregates every CVE we track for Dir-825 firmware, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Dir-825 firmware.

• CVE-2026-7069D-Link DIR-825 miniupnpd upnpsoap.c AddPortMapping buffer overflow8.0Apr 27, 2026
• CVE-2026-7068D-Link DIR-825 nmbd sserver.c NMBD_process buffer overflow8.8Apr 26, 2026
• CVE-2025-10666D-Link DIR-825 apply.cgi sub_4106d4 buffer overflow8.8Sep 18, 2025
• CVE-2025-10034D-Link DIR-825 httpd ping6_response.cg get_ping6_app_stat buffer overflow8.8Sep 6, 2025
• CVE-2025-8949D-Link DIR-825 httpd ping_response.cgi get_ping_app_stat stack-based overflow7.2Aug 14, 2025
• CVE-2025-7206D-Link DIR-825 httpd switch_language.cgi sub_410DDC stack-based overflow9.8Jul 8, 2025
• CVE-2025-6292D-Link DIR-825 HTTP POST Request sub_4091AC stack-based overflow8.8Jun 20, 2025
• CVE-2025-6291D-Link DIR-825 HTTP POST Request do_file stack-based overflow8.8Jun 20, 2025
• CVE-2024-0717D-Link Good Line Router v2 HTTP GET Request devinfo information disclosure5.3Jan 19, 2024
• CVE-2022-47035Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows attacker to execute arbitrary code via the GetConfig method to the /CPE endpoint.9.8Jan 31, 2023
• CVE-2022-29332D-LINK DIR-825 AC1200 R2 is vulnerable to Directory Traversal. An attacker could use the "../../../../" setting of the FTP server folder to set the router's root folder for FTP access. This allows ...6.5May 17, 2022
• CVE-2021-46441In the "webupg" binary of D-Link DIR-825 G1, because of the lack of parameter verification, attackers can use "cmd" parameters to execute arbitrary system commands after obtaining authorization.8.8Apr 27, 2022
• CVE-2021-46442In the "webupg" binary of D-Link DIR-825 G1, attackers can bypass authentication through parameters "autoupgrade.asp", and perform functions such as downloading configuration files and updating fir...9.8Apr 27, 2022
• CVE-2021-29296Null Pointer Dereference vulnerability in D-Link DIR-825 2.10b02, which could let a remote malicious user cause a denial of service. The vulnerability could be triggered by sending an HTTP request ...7.5Aug 10, 2021
• CVE-2020-10214An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is a stack-based buffer overflow in the httpd binary. It allows an authenticated user to execute arbitrary code via a POST to ntp...8.8Mar 7, 2020