D-Link Dir-852 Firmware vulnerabilities

5 CVEs affecting D-Link Dir-852 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-13562, published 2025-11-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-9752, published 2025-09-01. Critical severity, CVSS 9.8. EPSS: 17.4% chance of exploitation in the next 30 days. A security vulnerability has been detected in D-Link DIR-852 1.00CN B09. Impacted is the function soapcgi_main of the file soap.cgi of the component SOAP Service. Such manipulation of the argument…
CVE-2025-10628, published 2025-09-18. High severity, CVSS 8.8. EPSS: 9.3% chance of exploitation in the next 30 days. A vulnerability was found in D-Link DIR-852 1.00CN B09. This vulnerability affects unknown code of the file /htdocs/cgibin/hedwig.cgi of the component Web Management Interface. Performing…
CVE-2025-13562, published 2025-11-23. Critical severity, CVSS 9.8. EPSS: 6.2% chance of exploitation in the next 30 days. A vulnerability was identified in D-Link DIR-852 1.00. This issue affects some unknown processing of the file /gena.cgi. Such manipulation of the argument service leads to command injection. The…
CVE-2025-10629, published 2025-09-18. High severity, CVSS 8.8. EPSS: 5.4% chance of exploitation in the next 30 days. A vulnerability was determined in D-Link DIR-852 1.00CN B09. This issue affects the function ssdpcgi_main of the file htodcs/cgibin of the component Simple Service Discovery Protocol Service.…
CVE-2025-10093, published 2025-09-08. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was identified in D-Link DIR-852 up to 1.00CN B09. Affected by this vulnerability is the function phpcgi_main of the file /getcfg.php of the component Device Configuration Handler.…