D-Link DIR-823X Command Injection Vulnerability — CVE-2025-29635
CISA-KEV · D-Link · CVE-2025-29635
ID
CVE-2025-29635
CVE-2025-29635
Date
Updated
Activity
Source
CISA-KEV
CISA-KEV
Vendor
D-Link
D-Link
Threat
high
high
Exploited
Yes
Yes
Summary
CVE-2025-29635 is a advisory from CISA-KEV. D-Link DIR-823X Command Injection Vulnerability Vendor: D-Link. Severity/Threat: high. This item is marked as actively exploited. Source updated on 2026-04-25.
Product
DIR-823X
What to do
General, cautious steps (verify details in the official source):
- Prioritize patching or mitigation immediately (treat as actively risky).
- Identify affected product versions in your inventory and verify whether you are impacted.
- Apply vendor patches/updates or recommended mitigations as soon as available.
- Check logs/telemetry for indicators of compromise and suspicious activity.
- Consider temporary hardening: restrict access, reduce attack surface, and monitor aggressively.
- Read the official advisory for exact affected versions and remediation steps.