CVE-2025-44084 Command injection in n/a

Critical 9.8 Published 20 May 2025 Updated 21 May 2025

Attackers can execute arbitrary commands with highest privileges on D-Link DI-8100 routers via crafted HTTP requests.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-44084?

CVE-2025-44084 is a critical command injection vulnerability in n/a, published on 20 May 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

D-link DI-8100 16.07.26A1 is vulnerable to Command Injection. An attacker can exploit this vulnerability by crafting specific HTTP requests, triggering the command execution flaw and gaining the highest privilege shell access to the firmware system.

Weakness: CWE-77

Which versions are affected by CVE-2025-44084?

It affects 1 product.

Products include Dlink Di-8100g Firmware.

How do I fix CVE-2025-44084?

No fix has been published for CVE-2025-44084 yet. Limit exposure of the affected software until one is available.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2025-44084 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-44084 exists.

Sources

Also known as GHSA-g4h5-fxmv-9q6m.