CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-82593 — A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41...

·Source: NIST NVD

Updated:

Executive Summary

A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LTE Module Firmware Upgrade. This manipulation of the argument fota_url causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used.

Analysis

A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LTE Module Firmware Upgrade. This manipulation of the argument fota_url causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used. CVSS Score: 9.9. Published: 2026-08-31T00:16:41.630.

Indicators of Compromise (1)

CVE (1)
CVE-2026-82593
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 31, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

South Korea's Shinhan signs for Visa stablecoin platform

South Korean conglomerate Shinhan Financial Group has signed a memorandum of understanding with Visa to use the American firm's new stablecoin platform and explore AI-based payment models.

Finextra
CRITICALVulnerability

NVD CRITICAL: CVE-2026-82592 — A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function...

A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the file /boafrm/formDiskFormat of the component Disk Formatting Handler Endpoint. The manipulation of the argument partition results in stack-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used.

CVE-2026-82592
NIST NVD
LOWVulnerability

US government snitch-finder pleads guilty to leaking state secrets to foreign spies

Connor Jones reports: The former Defense Intelligence Agency (DIA) IT specialist previously accused of trying to pass secret and top-secret information to foreign spies has pleaded guilty following a successful FBI sting. Nathan Vilas Laatsch, then 28, and now 29, was arrested in May 2025 after an undercover FBI agent caught him for the second time transmitting... Source

DataBreaches.net