CVE-2025-8956 – D-Link DIR-818L Command Injection Vulnerability

CVE ID : CVE-2025-8956

Published : Aug. 14, 2025, 10:15 a.m. | 19 minutes ago

Description : A vulnerability was found in D-Link DIR‑818L up to 1.05B01. This issue affects the function getenv of the file /htdocs/cgibin of the component ssdpcgi. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Severity: 6.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…