CVE-2025-11099 | D-Link DIR-823X 250416 delete_prohibiting uci_del delvalue command injection

A vulnerability was found in D-Link DIR-823X 250416. It has been rated as critical. The impacted element is the function uci_del of the file /goform/delete_prohibiting. This manipulation of the argument delvalue causes command injection.

The identification of this vulnerability is CVE-2025-11099. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.