D-Link DIR-823X contains a command injection vulnerability that allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST …

D-Link DIR-823X routers contain a command injection vulnerability (CVE-2025-29635) that allows authorized attackers to execute arbitrary commands remotely. The vulnerability is exploited by sending a POST request to /goform/set_prohibiting endpoint. The affected product may be end-of-life or end-of-service. CISA and D-Link recommend users discontinue product utilization due to the security risk.