A vulnerability categorized as critical has been discovered in D-Link DIR-823X 250416. This affects the function
uci_set
of the file /goform/set_wifi_blacklists. Such manipulation leads to command injection.
This vulnerability is referenced as CVE-2025-11100. It is possible to launch the attack remotely. Furthermore, an exploit is available.