CVE-2025-11099: D-Link DIR-823X delete_prohibiting uci_del command injection

Published Sep 28, 2025

Updated

A vulnerability was determined in D-Link DIR-823X 250416. The impacted element is the function ucidel of the file /goform/deleteprohibiting. This manipulation of the argument delvalue causes command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

Affected Software

3 affected components

D-Link DIR-823X

All of the following

Dlink Dir-823x Firmware=250416

Dlink Dir-823x

Event History

Sep 28, 2025

CVE Published

via MITRE·06:02 AM

Data Sourced

via MITRE·06:02 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11099?

CVE-2025-11099 has been classified with a high severity due to its potential for remote command injection.

How do I fix CVE-2025-11099?

To fix CVE-2025-11099, update the D-Link DIR-823X firmware to the latest version provided by D-Link.

Could CVE-2025-11099 be exploited remotely?

Yes, CVE-2025-11099 can be exploited remotely, allowing attackers to access the vulnerable function over the network.

What systems are affected by CVE-2025-11099?

CVE-2025-11099 affects the D-Link DIR-823X router specifically.

What are the impacts of CVE-2025-11099 if successfully exploited?

Exploitation of CVE-2025-11099 can lead to unauthorized command execution on the affected D-Link DIR-823X device.