CVE-2025-10634

A weakness has been identified in D-Link DIR-823X 240126/240802/250416. The impacted element is the function sub_412E7C of the file /usr/sbin/goahead of the component Environment Variable Handler. This manipulation of the argument terminal_addr/server_ip/server_port causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

• CWE-74
• CWE-77

• https://github.com/Cpppq43/D-Link/blob/main/DIink-DIR-823x.mdExploit, Third Party Advisory
• https://pan.baidu.com/s/1dWnXEa58P0KHw53L9U_PoQBroken Link
• https://vuldb.com/?ctiid.324662Permissions Required, VDB Entry
• https://vuldb.com/?id.324662Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.650792Third Party Advisory, VDB Entry
• https://www.dlink.com/Product
• https://github.com/Cpppq43/D-Link/blob/main/DIink-DIR-823x.mdExploit, Third Party Advisory

Published

Sep 18, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-10628A vulnerability was found in D-Link DIR-852 1.00CN B09. This…8.8
• CVE-2025-10629A vulnerability was determined in D-Link DIR-852 1.00CN B09.…8.8
• CVE-2025-1063The Classified Listing – Classified ads & Business Directory…5.3
• CVE-2025-10630Grafana is an open-source platform for monitoring and observ…4.3
• CVE-2025-10631A vulnerability was identified in itsourcecode Online Petsho…5.4
• CVE-2025-10632A security flaw has been discovered in itsourcecode Online P…5.4
• CVE-2025-10635The Find Me On WordPress plugin through 2.0.9.1 does not san…7.7
• CVE-2025-10636The NS Maintenance Mode for WP WordPress plugin through 1.3.…3.5
• CVE-2025-10637The Social Feed Gallery plugin for WordPress is vulnerable t…5.3
• CVE-2025-10638The NS Maintenance Mode for WP WordPress plugin through 1.3.…5.3
• CVE-2025-10639The WorkExaminer Professional server installation comes with…8.8
• CVE-2025-1064The Login/Signup Popup ( Inline Form + Woocommerce ) plugin …5.4