Critical Vulnerability in D-Link Routers Exploited for Remote Code Execution

Critical Vulnerability in D-Link Routers Exploited for Remote Code Execution

First seen 8 Jan 2026, 23:52 UTC •ScworldWebpronews •85% similarity •60.7

Article Content

Browse articles
ThreatCluster

A critical vulnerability, tracked as CVE-2026-0625, has been identified in legacy D-Link DSL gateway routers, allowing unauthenticated attackers to execute arbitrary commands remotely. The flaw, which has a CVSS score of 9.3, is due to inadequate sanitization of DNS configuration parameters, enabling command injection through the 'dnscfg.cgi' endpoint. This vulnerability is currently being exploited in the wild.

ThreatCluster AI

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Mirai VulnCheck D-Link Dsl-2640b D-Link Dsl-2740r D-Link Dsl-2780b D-Link Dsl-526b D-Link DSL Gateway Routers Telecommunications Botnet Data Breach Malware Man-in-the-Middle Zero-day Exploit