CVE-2025-5492 | D-Link DI-500WF-WT up to 20250511 /usr/sbin/jhttpd /msp_info.htm?flag=cmd sub_456DE8 command injection

A vulnerability has been found in D-Link DI-500WF-WT up to 20250511 and classified as critical. Affected by this vulnerability is the function sub_456DE8 of the file /msp_info.htm?flag=cmd of the component /usr/sbin/jhttpd. The manipulation of the argument cmd leads to command injection.

This vulnerability is known as CVE-2025-5492. The attack can be launched remotely. Furthermore, there is an exploit available.