CVE-2021-46441: D-Link DIR-825 Firmware

High severity, CVSS 8.8. EPSS: 32.6% chance of exploitation in the next 30 days.

In the "webupg" binary of D-Link DIR-825 G1, because of the lack of parameter verification, attackers can use "cmd" parameters to execute arbitrary system commands after obtaining authorization.

Affected products

• D-Link DIR-825 Firmware: affected versions not specified

Published 2022-04-27. Last modified 2026-06-17.