CVE-2026-82593

CRITICAL 9.9CVE-2026-82593 · Published 31/08/2026 · updated 01/09/2026

In short

CVE-2026-82593 is a CRITICAL (CVSS 9.9) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 0.91%, higher than 60.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LTE Module Firmware Upgrade. This manipulation of the argument fota_url causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used.

References

Robots10/IoT_vlu
vuldb.com/cve/CVE-2026-82593
vuldb.com/submit/892516
vuldb.com/vuln/397088
vuldb.com/vuln/397088/cti
dlink.com

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free