CVE-2025-5621

A vulnerability has been found in D-Link DIR-816 1.10CNB05 and classified as critical. Affected by this vulnerability is the function qosClassifier of the file /goform/qosClassifier. The manipulation of the argument dip_address/sip_address leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

• CWE-77
• CWE-78
• CWE-78

• https://github.com/wudipjq/my_vuln/blob/main/D-Link5/vuln_49/49.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.311107Permissions Required
• https://vuldb.com/?id.311107Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.589221Third Party Advisory, VDB Entry
• https://www.dlink.com/Product
• https://github.com/wudipjq/my_vuln/blob/main/D-Link5/vuln_49/49.mdExploit, Third Party Advisory

Published

Jun 5, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-5617A vulnerability classified as critical has been found in PHP…9.8
• CVE-2025-5618A vulnerability classified as critical was found in PHPGuruk…9.8
• CVE-2025-5619A vulnerability, which was classified as critical, has been …9.8
• CVE-2025-5620A vulnerability, which was classified as critical, was found…9.8
• CVE-2025-56200A URL validation bypass vulnerability exists in validator.js…6.1
• CVE-2025-56207A security flaw in the '_transfer' function of a smart contr…6.5
• CVE-2025-56212phpgurukul Hospital Management System 4.0 is vulnerable to S…9.8
• CVE-2025-56214phpgurukul Hospital Management System 4.0 is vulnerable to S…9.8
• CVE-2025-56215phpgurukul Hospital Management System 4.0 is vulnerable to S…6.5
• CVE-2025-56216phpgurukul Hospital Management System 4.0 is vulnerable to S…8.5
• CVE-2025-56218An arbitrary file upload vulnerability in SigningHub v8.6.8 …9.8
• CVE-2025-56219Incorrect access control in SigningHub v8.6.8 allows attacke…7.1