CVE-2026-7288
A vulnerability has been found in D-Link DIR-825M 1.1.12. This vulnerability affects the function sub_4151FC of the file /boafrm/formVpnConfigSetup. The manipulation of the argument submit-url leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
- Affected products
- Dir-825
- Dlink dir-825m Firmware
- = 1.1.12
- CVSS 2.0
- 9.0 HIGH
- CVSS 3.1
- 8.8 HIGH
- EPSS
- 0.7% (49th percentile)
- Weakness
- CWE-120, CWE-119
- NVD status
- Analyzed
- Published
- 2026-04-28
CVE-2026-7288 at NVD
No indexed exploits for CVE-2026-7288 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2026-7288 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.