CVE-2026-82593General

LOWCVSS 8.6 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LTE Module Firmware Upgrade. This manipulation of the argument fota_url causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-119CWE-121

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • General: 2 classified signals
  • Disclosure: 1 classified signal
  • Peaked at 2 mentions on most recent observed day (2026-08-31)
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-08-30: 1Mentions · 2026-08-31: 2Technical Details · 2026-08-31: 108-3008-31
Signal classification2 categories
General
266.7%
Disclosure
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-08-301
General1
2026-08-312
Disclosure1General1
Full discourse3 posts
  • CVE@CVEnew
    General

    CVE-2026-82593 A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LTE Module Firmwar… https://www.cve.org/CVERecord?id=CVE-2026-82593

    Post summary

    The post announces CVE‑2026‑82593 affecting the D‑Link DIR‑825M firmware, specifies the impacted function and file, but provides no PoC, exploit, patch information, or evidence of active exploitation.

    01040903
    58.1K followersView on X
  • CERT-PY@CERTpy
    Disclosure

    ⚠️ Vulnerabilidades en productos D-Link ❗ CVE-2026-82593 ❗ CVE-2026-82592 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-d-link-2/ https://t.co/V5uNknn0Ox

    Post summary

    Two CVEs (CVE-2026-82593 and CVE-2026-82592) affecting D‑Link products are announced, with links provided for further information.

    00000232
    6.7K followersView on X
  • VulDB 🛡@vuldb
    General

    A severe vulnerability was disclosed for D-Link DIR-825M (CVE-2026-82593) https://vuldb.com/vuln/397088

    Post summary

    The post announces the severe CVE‑2026‑82593 affecting the D‑Link DIR‑825M but shares no details on exploitation methods, patches, or technical specifics.

    00000152
    2.3K followersView on X

Explore more