CVE-2025-10634

HighCVSS 8.8/10Last modified Sep 30, 2026

Description

A weakness has been identified in D-Link DIR-823X 240126/240802/250416. The impacted element is the function sub_412E7C of the file /usr/sbin/goahead of the component Environment Variable Handler. This manipulation of the argument terminal_addr/server_ip/server_port causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-77

Affected software

Vendor	Product	Versions
D-Link	DIR-823X	240126; 240802; 250416

References

https://github.com/Cpppq43/D-Link/blob/main/DIink-DIR-823x.mdExploit, Third Party Advisory
https://pan.baidu.com/s/1dWnXEa58P0KHw53L9U_PoQBroken Link
https://vuldb.com/?ctiid.324662Permissions Required, VDB Entry
https://vuldb.com/?id.324662Third Party Advisory, VDB Entry
https://vuldb.com/?submit.650792Third Party Advisory, VDB Entry
https://www.dlink.com/Product
https://github.com/Cpppq43/D-Link/blob/main/DIink-DIR-823x.mdExploit, Third Party Advisory

Timeline

Published: Sep 18, 2025
Last modified: Sep 30, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-106357.7The Find Me On WordPress plugin through 2.0.9.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing subscr CVE-2025-106363.5The NS Maintenance Mode for WP WordPress plugin through 1.3.1 does not sanitise and escape some of its settings, which could allow high priv CVE-2025-106375.3The Social Feed Gallery plugin for WordPress is vulnerable to Information Exposure in versions less than, or equal to, 4.9.2. This is due to CVE-2025-106385.3The NS Maintenance Mode for WP WordPress plugin through 1.3.1 lacks authorization in its subscriber export function allowing unauthenticated CVE-2025-106398.8The WorkExaminer Professional server installation comes with an FTP server that is used to receive the client logs on TCP port 12304. An att CVE-2025-10645.4The Login/Signup Popup ( Inline Form + Woocommerce ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's xoo_CVE-2025-106409.8An unauthenticated attacker with access to TCP port 12306 of the WorkExaminer server can exploit missing server-side authentication checks t CVE-2025-106417.1All WorkExaminer Professional traffic between monitoring client, console and server is transmitted as plain text. This allows an attacker wi CVE-2025-106423.5A vulnerability has been found in wangchenyi1996 chat_forum up to 80bdb92f5b460d36cab36e530a2c618acef5afd2. This impacts an unknown function CVE-2025-106439.1Wondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypa CVE-2025-106449.4Wondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability. This vulnerability allows remote attacke CVE-2025-106455.3The WP Reset plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.05 via the WF_Lice