CVE-2025-11096: D-Link DIR-823X diag_traceroute command injection

Published Sep 28, 2025

Updated

A flaw has been found in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/diagtraceroute. Executing manipulation of the argument targetaddr can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used.

Affected Software

3 affected components

D-Link DIR-823X

All of the following

Dlink Dir-823x Firmware=250416

Dlink Dir-823x

Event History

Sep 28, 2025

CVE Published

via MITRE·04:32 AM

Data Sourced

via MITRE·04:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11096?

CVE-2025-11096 has been classified as a high severity vulnerability due to its potential for remote command injection.

How do I fix CVE-2025-11096?

To fix CVE-2025-11096, update your D-Link DIR-823X router to the latest firmware version released by D-Link.

Who is affected by CVE-2025-11096?

CVE-2025-11096 affects users of the D-Link DIR-823X router model.

What is the impact of CVE-2025-11096?

The impact of CVE-2025-11096 includes remote attackers being able to execute arbitrary commands on the affected device.

Is CVE-2025-11096 exploitable remotely?

Yes, CVE-2025-11096 is exploitable remotely, allowing attackers to manipulate the target_addr parameter.