{"id":"CVE-2025-9752","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-9752","generatedAt":"2026-10-28T04:16:11.877Z","title":"A security vulnerability has been detected in D-Link DIR-852 1.00CN B09.","description":"A security vulnerability has been detected in D-Link DIR-852 1.00CN B09. Impacted is the function soapcgi_main of the file soap.cgi of the component SOAP Service. Such manipulation of the argument service leads to os command injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. This vulnerability only affects products that are no longer supported by the maintainer.","published":"2025-09-01T01:15:47.000Z","lastModified":"2026-06-17T10:09:41.000Z","status":"Analyzed","sourceIdentifier":"cna@vuldb.com","cvss":{"version":"4.0","score":5.5,"severity":"MEDIUM","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-77","CWE-78"],"affected":["dlink/dir-852 firmware"],"epss":{"score":0.17365,"percentile":0.971,"date":"2026-10-27","history":[{"date":"2026-10-09","score":0.1785,"percentile":0.97107}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 17.4%, higher than 97% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"https://github.com/i-Corner/cve/issues/18","tags":["Exploit","Issue Tracking"],"source":"cna@vuldb.com"},{"url":"https://vuldb.com/?ctiid.322053","tags":["Permissions Required","VDB Entry"],"source":"cna@vuldb.com"},{"url":"https://vuldb.com/?id.322053","tags":["Third Party Advisory","VDB Entry"],"source":"cna@vuldb.com"},{"url":"https://vuldb.com/?submit.640590","tags":["Third Party Advisory","VDB Entry"],"source":"cna@vuldb.com"},{"url":"https://www.dlink.com/","tags":["Product"],"source":"cna@vuldb.com"},{"url":"https://github.com/i-Corner/cve/issues/18","tags":["Exploit","Issue Tracking"],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-9752","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}