CVE-2025-1103: d-link dir-823x Improper Resource Shutdown or Release

EPSS trend

Probability

14.07%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 14.07% on 19-09-2026

19-09-202619-10-2026

EPSS score

14.07%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (tasty-foxtrot-3a8.notion.site)
Maturity: unknown
referenceUnverified
Exploit Reference (tasty-foxtrot-3a8.notion.site)
Maturity: unknown

References

6 links

vuldb.com?id.294933VDB EntryTechnical DescriptionThird Party Advisory
vuldb.com?ctiid.294933SignaturePermissions RequiredThird Party AdvisoryVDB Entry
vuldb.com?submit.489603Third Party Advisory
tasty-foxtrot-3a8.notion.site/D-link-DIR-823X-set_wifi_blacklists-Vulnerability-1870448e619580e5bf09cf628692f7a9ExploitThird Party Advisory
www.dlink.comProduct
tasty-foxtrot-3a8.notion.site/D-link-DIR-823X-set_wifi_blacklists-Vulnerability-1870448e619580e5bf09cf628692f7a9ExploitThird Party Advisory

Related vulnerabilities

CVE-2025-2717d-linkdir-823x+14.62%1y ago24-03-2025 23:31A vulnerability, which was classified as critical, has been found in D-Link DIR-823X 240126/240802. This issue affects the function sub_41710C of the file /goform/diag_nslookup of the component HTTP POST Request Handler. The manipulation of the argument target_addr leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.CVE-2025-55848dlinkdir-823x_firmware0.41%1y ago26-09-2025 00:00An issue was discovered in DIR-823 firmware 20250416. There is an RCE vulnerability in the set_cassword settings interface, as the http_casswd parameter is not filtered by '&'to allow injection of reverse connection commands.CVE-2025-11096d-linkdir-823x+14.13%1y ago28-09-2025 04:32A flaw has been found in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/diag_traceroute. Executing manipulation of the argument target_addr can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used.CVE-2025-11092d-linkdir-823x+14.13%1y ago28-09-2025 02:02A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub_412E7C of the file /goform/set_switch_settings. This manipulation of the argument port causes command injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.CVE-2025-11098d-linkdir-823x+14.13%1y ago28-09-2025 05:32A vulnerability was found in D-Link DIR-823X 250416. The affected element is an unknown function of the file /goform/set_wifi_blacklists. The manipulation of the argument macList results in command injection. The attack may be performed from remote. The exploit has been made public and could be used.CVE-2025-11099d-linkdir-823x+14.13%1y ago28-09-2025 06:02A vulnerability was determined in D-Link DIR-823X 250416. The impacted element is the function uci_del of the file /goform/delete_prohibiting. This manipulation of the argument delvalue causes command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

All vulnerabilities indir-823x dir-823x_firmware

CVE-2025-1103: d-link dir-823x Improper Resource Shutdown or Release

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References