Which versions of D-Link DIR-825M are affected by CVE-2026-82593?

D-Link DIR-825M routers with LTE Module Firmware version 1.1.8 contain a high-severity remote code execution vulnerability allowing attackers to fully compromise the router and its attached cellular…

Is there a public PoC exploit available for CVE-2026-82593?

Yes, a public proof-of-concept exploit is available for CVE-2026-82593. Prioritise patching immediately. EPSS: 0.5%.

How to fix or mitigate CVE-2026-82593?

Within 24 hours: Identify all DIR-825M 1.1.8 devices and restrict access to the firmware upgrade interface (/boafrm/formLtefotaUpgradeFibocom) through firewall rules; isolate affected systems from untrusted networks. Within 7 days: Complete inventory of affected routers, implement network segmentation to contain potential lateral movement, and initiate replacement planning with alternative equipment. Within 30 days: Replace affected routers with updated models or-if business requirements mandate retention-establish continuous monitoring for exploitation attempts and institute strict role-based access controls on all administrative functions.

D-Link DIR-825M CVE-2026-82593

Q: What is the CVSS score of CVE-2026-82593?

CVE-2026-82593 has a CVSS 4.0 base score of 8.6 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.5%.

EUVD-2026-68296 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-08-30 VulDB

GHSA-hcq5-x562-2jwm

Buffer Overflow D-Link Stack Overflow Dir 825M D-Link

8.6

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

8.6 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

9.9 CRITICAL

Network-accessible via web interface, low complexity; PR:L per CVSS 4.0 input; scope change to Fibocom LTE subsystem justifies S:C.

3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

POC Analysis Generated

Aug 31, 2026 - 11:22 vuln.today

Analysis Updated

Aug 31, 2026 - 00:28 vuln.today

v1 (cvss_changed)

Re-analysis Queued

Aug 31, 2026 - 00:22 vuln.today

cvss_changed

Severity Changed

Aug 31, 2026 - 00:22 NVD

CRITICAL HIGH

CVSS changed

Aug 31, 2026 - 00:22 NVD

9.4 (CRITICAL) 8.6 (HIGH)

Analysis Generated

Aug 30, 2026 - 23:51 vuln.today

DescriptionCVE.org

A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LTE Module Firmware Upgrade. This manipulation of the argument fota_url causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used.

Articles & Coverage 1

News 8 New D-Link Vulnerabilities - 8 High Severity, 7 With POC Aug 31, 2026

AnalysisAI

Stack-based buffer overflow in the D-Link DIR-825M 1.1.8 LTE Module Firmware Upgrade handler allows low-privileged remote attackers to achieve remote code execution by supplying an oversized fota_url argument to /boafrm/formLtefotaUpgradeFibocom. The CVSS 4.0 vector scores this at 8.6 with subsequent-system impact (SC:H/SI:H/SA:H), reflecting the potential to compromise the attached Fibocom LTE module as well as the primary router. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	The attacker must have network access to the DIR-825M's web administration interface and must authenticate with at least low-privilege credentials (PR:L per CVSS 4.0 vector) - unauthenticated exploitation is not supported by the available CVSS data. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 4.0 score of 8.6 reflects a network-accessible, low-complexity flaw requiring only low-privilege credentials, with high impact on both the router and the attached LTE module. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	No vendor-released patch has been identified at time of analysis. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours: Identify all DIR-825M 1.1.8 devices and restrict access to the firmware upgrade interface (/boafrm/formLtefotaUpgradeFibocom) through firewall rules; isolate affected systems from untrusted networks. …

Threat intelligence, references, and detailed analysis are available after sign-in.