Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.6
CVE-2026-82593: D-Link DIR-825M LTE firmware upgrade can be hijacked remotely
CVE-2026-82593 · published 3 days ago
Summary
The router’s LTE module update feature in version 1.1.8 can be fooled into running unwanted code when an attacker sends a specially crafted update link. This could let a remote attacker take control of the device. Update the router with the latest firmware from D‑Link or contact their support for the fix.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| d-link | dir-825m | 1.1.8 |
Original advisory text
A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LTE Module Firmware Upgrade. This manipulation of...
A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LTE Module Firmware Upgrade. This manipulation of the argument fota_url causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used.
References
- https://vuldb.com/vuln/397088 vdb-entry technical-description
- https://vuldb.com/vuln/397088/cti signature permissions-required
- https://vuldb.com/cve/CVE-2026-82593 third-party-advisory
- https://vuldb.com/submit/892516 third-party-advisory
- https://github.com/Robots10/IoT_vlu/blob/main/reports/Dlink/formLtefotaUpgradeFi... exploit patch
- https://www.dlink.com/ product
Severity
8.6
High
CVSS 3.1: 9.9 (MITRE)
Exploitation
EPSS <1%
Type
CWE-121Stack-based Buffer Overflow
CWE-119Buffer Overflow
Timeline
Published31 Aug 2026
Updated2 Sep 2026
First seen31 Aug 2026
Monitor software like this
Free during beta