cbcvebase.
CVE-2025-57636
published 2025-09-23

CVE-2025-57636: OS Command injection vulnerability in D-Link C1 2020-02-21. The sub_47F028 function in jhttpd contains a command injection vulnerability via the HTTP parameter…

PriorityP344medium6.5CVSS 3.1
AVNACLPRNUINSUCLILAN
EPSS
1.12%
62.4th percentile
OS Command injection vulnerability in D-Link C1 2020-02-21. The sub_47F028 function in jhttpd contains a command injection vulnerability via the HTTP parameter "time".

Affected

1 ranges
VendorProductVersion rangeFixed in
dlinkdi-7100g_firmware——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.