CVE-2026-7288

Description

A vulnerability has been found in D-Link DIR-825M 1.1.12. This vulnerability affects the function sub_4151FC of the file /boafrm/formVpnConfigSetup. The manipulation of the argument submit-url leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

CVSS Vector

References

• https://github.com/Kiciot/cve/issues/2
• https://vuldb.com/submit/803024
• https://vuldb.com/vuln/359946
• https://vuldb.com/vuln/359946/cti
• https://www.dlink.com/