CVE-2025-14208

A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub_415028 of the file /goform/set_wan_settings. The manipulation of the argument ppp_username results in command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.

• CWE-74
• CWE-77

• https://github.com/panda666-888/vuls/blob/main/d-link/dir-823x/set_wan_settings.mdExploit, Third Party Advisory
• https://github.com/panda666-888/vuls/blob/main/d-link/dir-823x/set_wan_settings.md#pocExploit
• https://vuldb.com/?ctiid.334651Permissions Required, VDB Entry
• https://vuldb.com/?id.334651Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.700499Third Party Advisory, VDB Entry
• https://www.dlink.com/Product

Published

Dec 8, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-14202A vulnerability in the file upload at bookmark + asset rende…8.2
• CVE-2025-14203A flaw has been found in code-projects Question Paper Genera…8.8
• CVE-2025-14204A vulnerability has been found in TykoDev cherry-studio-Tyko…6.3
• CVE-2025-14205A vulnerability was found in code-projects Chamber of Commer…5.4
• CVE-2025-14206A vulnerability was determined in SourceCodester Online Stud…7.5
• CVE-2025-14207A vulnerability was identified in tushar-2223 Hotel-Manageme…7.3
• CVE-2025-14209A weakness has been identified in Campcodes School File Mana…9.8
• CVE-2025-1421Data provided in a request performed to the server while act…2.4
• CVE-2025-14210A security vulnerability has been detected in projectworlds …9.8
• CVE-2025-14211A vulnerability was detected in projectworlds Advanced Libra…9.8
• CVE-2025-14212A flaw has been found in projectworlds Advanced Library Mana…9.8
• CVE-2025-14213Cato Networks’ Socket versions prior to 25 contain a command…8.3