CVE-2025-55583 – D-Link DIR-868L Command Injection Vulnerability

CVE ID : CVE-2025-55583

Published : Aug. 28, 2025, 3:16 p.m. | 1 hour, 28 minutes ago

Description : D-Link DIR-868L B1 router firmware version FW2.05WWB02 contains an unauthenticated OS command injection vulnerability in the fileaccess.cgi component. The endpoint /dws/api/UploadFile accepts a pre_api_arg parameter that is passed directly to system-level shell execution functions without sanitization or authentication. Remote attackers can exploit this to execute arbitrary commands as root via crafted HTTP requests.

Severity: 9.8 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…