CVE-2025-25894

Summary

CVE-2025-25894 is a newly discovered OS command injection vulnerability affecting D-Link DSL-3782 v1.01 routers. The flaw is located in the handling of the samba_wg and samba_nbn parameters. An attacker can exploit this vulnerability by sending a crafted packet, allowing them to inject and execute arbitrary operating system commands, potentially compromising the affected device. This issue poses a significant risk, as it can enable unauthorized access and data theft. Users are strongly advised to update their routers to the latest firmware to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.