Exploit for CVE-2026-7289

cve · 2026-04-28

Description

CVE-2026-7289 affects D-Link DIR-825M formWanConfigSetup buffer overflow on submit-url.

Entry point

Parametersubmit-url · request body

Path/boafrm/formWanConfigSetup

Buffer overflow in formWanConfigSetup when submitting submit-url parameter.

Affected Dlink dir-825m Firmware versions

Dlink dir-825m Firmware= 1.1.12

All known vulnerabilities by product

Dir-825

CVSS 9.0 for CVE-2026-7289

9.0

HIGH SEVERITY

Version 2.0

VectorAV:N/AC:L/Au:S/C:C/I:C/A:C

Attack Vector:NETWORK

Attack Complexity:LOW

Attack Requirements:NONE

Privileges Required:LOW

User Interaction:NONE

EPSS Score

0.7%higher than 50.2% of all CVEs

Updated 2026-08-28

CVE Information

CVE-2026-7289

References

https://vuldb.com/vuln/359947

https://www.dlink.com/

https://vuldb.com/submit/803025

https://vuldb.com/vuln/359947/cti

https://github.com/Kiciot/cve/issues/3

Exploit Details

Modified:2026-06-17 11:02

Last Seen:2026-08-24 12:46

Reporter:VulDB

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=CVE-2026-7289
A vulnerability was found in D-Link DIR-825M 1.1.12. This issue affects the function sub_414BA8 of the file /boafrm/formWanConfigSetup. The manipulation of the argument submit-url results in buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.

Exploit Code

Share

Share on social media: