CVE-2026-82592Disclosure

LOWCVSS 8.6 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the file /boafrm/formDiskFormat of the component Disk Formatting Handler Endpoint. The manipulation of the argument partition results in stack-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-119CWE-121

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-08-31); latest day: 1
  • 4 total mentions across 3 days

Deep dive

Activity timeline4 mentions / 3d
01122Mentions · 2026-08-30: 1Mentions · 2026-08-31: 2Mentions · 2026-09-04: 1Patch / Workaround · 2026-09-04: 1Technical Details · 2026-08-31: 1Technical Details · 2026-09-04: 108-3008-3109-04
Signal classification3 categories
Disclosure
250.0%
General
125.0%
Patch
125.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-08-301
Disclosure1
2026-08-312
Disclosure1General1
2026-09-041
Patch1
Full discourse4 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-82592 A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the file /boafrm/formDiskFormat of the component Disk Formatting Handle… https://www.cve.org/CVERecord?id=CVE-2026-82592

    Post summary

    CVE-2026-82592 is disclosed as a vulnerability in the Disk Formatting Handle of the D-Link DIR-825M firmware, with specific function and file details provided but lacking any PoC, exploit, or mitigation information.

    00010842
    58.0K followersView on X
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 CRITICAL: CVE-2026-82592 (CVSS 9.9) - Stack-based buffer overflow in D-Link DIR-825M 1.1.8 router. Remote exploit now PUBLIC. Affects /boafrm/formDiskFormat endpoint. Patch immediately! #CVE #PatchNow #ThreatIntel https://t.co/JOsrA9MIYL

    Post summary

    The tweet alerts to a critical stack‑based buffer overflow in a D‑Link router, urges immediate patching, and notes a publicly available exploit but does not provide exploit code or evidence of active attacks.

    0000028
    124 followersView on X
  • CERT-PY@CERTpy
    General

    ⚠️ Vulnerabilidades en productos D-Link ❗ CVE-2026-82593 ❗ CVE-2026-82592 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-d-link-2/ https://t.co/V5uNknn0Ox

    Post summary

    The tweet lists two CVE identifiers for D‑Link products and provides a link for more information, but offers no further details about the vulnerabilities, mitigations, or exploitation.

    00000232
    6.7K followersView on X
  • VulDB 🛡@vuldb
    Disclosure

    A new vulnerability with increased severity was disclosed for D-Link DIR-825M (CVE-2026-82592) https://vuldb.com/vuln/397087

    Post summary

    A new vulnerability with increased severity was disclosed for the D-Link DIR-825M router (CVE-2026-82592), with additional information available via the VulDB link.

    00000147
    2.3K followersView on X

Explore more