A command injection vulnerability (CVE-2025-60700) affects the D-Link DIR-882 Router firmware DIR882A1_FW102B02. The flaw exists in the prog.cgi and librcm.so binaries, where user-supplied IP address values for DMZ settings are stored unsafely and later used in shell commands without sanitization. This allows an unauthenticated remote attacker to execute arbitrary commands via specially crafted HTTP requests to the router's web interface. The vulnerability has a CVSS score of 6.5 (medium severity). No patch or remediation information is currently available.