CVE-2026-82595: Command Injection in D-Link DIR-825M

This vulnerability affects D-Link DIR-825M version 1.1.8 in the System Command Execution component, specifically the function sub_456CF4 in the /boafrm/formSysCmd file. An attacker can remotely manipulate the sysCmd argument to perform command injection, potentially executing arbitrary commands on the device. Public exploit code is available, but there is no official patch or remediation level provided by the vendor at this time.

Successful exploitation allows remote attackers to execute arbitrary system commands on the affected device, potentially compromising the router's integrity and control. The medium CVSS score reflects moderate impact with network attack vector and low complexity, but limited privileges required and no user interaction needed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented. Until a patch is available, restrict network access to the device's management interface to trusted users only and monitor for suspicious activity related to command injection attempts.