HIGHVulnerability
Verified
Global

CISA KEV: D-Link DIR-823X — D-Link DIR-823X Command Injection Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

D-Link DIR-823X contains a command injection vulnerability that allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

Analysis

D-Link DIR-823X contains a command injection vulnerability that allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. Added to CISA Known Exploited Vulnerabilities catalog on 2026-04-24. Remediation due: 2026-05-08.

Indicators of Compromise (1)

CVE (1)
CVE-2025-29635
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Apr 24, 2026. Verified by: CISA.

Related Threats

MEDIUMVulnerabilityNEW

CaixaBank launches a carbon credit trading platform to help clients offset their emissions

CaixaBank CIB has launched a carbon credit trading platform, a tool designed to make it easier for corporate clients and businesses to voluntarily offset CO2 emissions.

Finextra
MEDIUMVulnerabilityNEW

Cyber Resilience is the New Business Continuity Plan

The organizations best prepared to face disruption are those that align security, continuity and risk management around what the business cannot afford to lose. The post Cyber Resilience is the New Business Continuity Plan appeared first on SecurityWeek .

SecurityWeek
MEDIUMVulnerabilityNEW

Microsoft confirms patching issues in restricted Windows networks

Microsoft says customers in restricted network environments may encounter Windows Update failures after installing the January 2026 optional non-security preview updates. [...]

BleepingComputer