CVE-2026-82592: D-Link DIR-825M Disk Formatting Handler Endpoint formDiskFormat sub_46725C stack-based overflow
A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub46725C of the file /boafrm/formDiskFormat of the component Disk Formatting Handler Endpoint. The manipulation of the argument partition results in stack-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
Which deployments are known to be affected?
The affected product/version identified in the available data is D-Link DIR-825M 1.1.8. The vulnerable functionality is the Disk Formatting Handler Endpoint at /boafrm/formDiskFormat.
What does an attacker need to exploit this issue?
The issue can be exploited remotely by manipulating the partition argument sent to the formDiskFormat handler. The published CVSS vector indicates low attack complexity, no user interaction, and that the attacker needs low privileges.
Is public exploit code available?
Yes. The available data states that an exploit is public and may be used.
What is the likely security impact if exploitation succeeds?
The supplied severity data rates the issue critical at 9.9 and indicates high impacts to confidentiality, integrity, and availability, with scope changed.