CVE Intelligence

Dlink DIR-852 vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Dlink DIR-852: 2 record(s), with affected versions and fixes.

CVE-2025-13562 Critical · 9.8 CWE-77 Nov 23, 2025
D-Link DIR-852 gena.cgi command injection
A vulnerability was identified in D-Link DIR-852 1.00. This issue affects some unknown processing of the file /gena.cgi. Such manipulation of the argument service leads to command injection. The attack can be executed remotely. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVE-2025-11488 High · 7.3 CWE-74 Oct 8, 2025
D-Link DIR-852 HNAP1 command injection
A weakness has been identified in D-Link DIR-852 up to 20251002. This affects an unknown part of the file /HNAP1/. Executing manipulation can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. This vulnerability only affects products that are no longer supported by the maintainer.