CVE-2025-25746: D-Link Dir-853 Firmware

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetWanSettings module.

Affected products

• D-Link Dir-853 Firmware: version 1.20b07 only

Published 2025-02-12. Last modified 2026-06-17.