Hackers actively exploit critical RCE flaw in legacy D

Securityaffairs.Co •Pierluigi Paganini • January 7, 2026

Attackers are exploiting a critical flaw (CVE-2026-0625) in old D-Link DSL routers that allows remote command execution. Threat actors are actively exploiting a critical RCE flaw, tracked as CVE-2026-0625 (CVSS score of 9.3), in legacy D-Link DSL routers. The vulnerability is an improper neutralization of special elements used in an OS Command (‘OS Command Injection’), […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Exploitation of Critical RCE Flaw in Legacy D-Link Routers Attackers are exploiting a critical remote command execution vulnerability, tracked as CVE-2026-0625, in legacy D-Link DSL routers. This flaw, with a CVSS score of 9.3, allows for OS command injection, impacting users of these outdated devices. The ongoing attacks highlight the risks associated with using unsupported hardware. 2 sources 60

Extracted Entities

CVEs (1)

CVE-2026-0625