CVE-2025-10123

A vulnerability was determined in D-Link DIR-823X up to 250416. Affected by this vulnerability is the function sub_415028 of the file /goform/set_static_leases. Executing manipulation of the argument Hostname can lead to command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

• CWE-74
• CWE-77

• https://github.com/lin-3-start/lin-cve/blob/main/DIR-823X/D-Link%20DIR-823X%20routers%20have%20an%20unauthorized%20command%20execution%20vulnerability.mdExploit, Third Party Advisory
• https://github.com/lin-3-start/lin-cve/blob/main/DIR-823X/D-Link%20DIR-823X%20routers%20have%20an%20unauthorized%20command%20execution%20vulnerability.md#pocExploit, Third Party Advisory
• https://vuldb.com/?ctiid.323093Permissions Required, VDB Entry
• https://vuldb.com/?id.323093Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.645712Third Party Advisory, VDB Entry
• https://www.dlink.com/Product

Published

Sep 9, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-10117A weakness has been identified in SourceCodester Simple To-D…5.4
• CVE-2025-10118A security vulnerability has been detected in itsourcecode E…9.8
• CVE-2025-1012A race during concurrent delazification could have led to a …7.5
• CVE-2025-10120A vulnerability was detected in Tenda AC20 up to 16.03.08.12…8.8
• CVE-2025-10121A flaw has been found in uverif up to 3.2. This affects the …6.3
• CVE-2025-10122A vulnerability was found in Maccms10 2025.1000.4050. Affect…7.2
• CVE-2025-10124The Booking Manager WordPress plugin before 2.1.15 register…4.5
• CVE-2025-10125The Memberlite Shortcodes plugin for WordPress is vulnerable…6.4
• CVE-2025-10126The MyBrain Utilities plugin for WordPress is vulnerable to …6.4
• CVE-2025-10127Daikin Europe N.V Security Gateway is vulnerable to an auth…9.8
• CVE-2025-10128The Eulerpool Research Systems plugin for WordPress is vulne…6.4
• CVE-2025-10129The WordPress Live Webcam Widget & Shortcode plugin for Word…6.4