Description
D-Link DIR-823X是中国友讯（D-Link）公司的一款无线路由器。 D-Link DIR-823X 250416版本存在命令注入漏洞，该漏洞源于文件/goform/delete_prohibiting中函数uci_del对参数delvalue的错误操作，可能导致远程命令注入攻击。
D-Link DIR-823X 命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.ithome.com.tw/news/175346
https://zeropath.com/blog/cve-2025-10123-dlink-dir823x-command-injection
https://www.sentinelone.com/vulnerability-database/cve-2026-2082/
https://www.akamai.com/blog/security-research/cve-2025-29635-mirai-campaign-targets-d-link-devices
https://www.bleepingcomputer.com/news/security/new-mirai-campaign-exploits-rce-flaw-in-eol-d-link-routers/
https://github.com/DavCloudz/cve/blob/main/D-link/DIR_823X/DIR-823X%20V250416%20Command%20Execution%20Vulnerability.md
https://www.knowsafe.com/ti/info/0/993265
https://nvd.nist.gov/vuln/detail/CVE-2025-29635