D-Link DIR-825 vulnerabilities

2 CVEs affecting D-Link DIR-825, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-96891, published 2026-09-24.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-4627, published 2026-03-24. High severity, CVSS 7.2. EPSS: 3.4% chance of exploitation in the next 30 days. A vulnerability was found in D-Link DIR-825 and DIR-825R 1.0.5/4.5.1. Affected is the function handler_update_system_time of the file libdeuteron_modules.so of the component NTP Service. The…
• CVE-2026-96891, published 2026-09-24. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability was identified in D-Link DIR-825 3.00b32. Affected is the function tunnel_set_params of the file tunnel.c of the component rp-l2tp. The manipulation of the argument peer_hostname …