cve/2025/CVE-2025-29635.md
2025-09-29 21:09:30 +02:00

783 B

CVE-2025-29635

Description

A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function, triggering remote command execution.

POC

Reference

Github

No PoCs found on GitHub currently.