Vulnerability · Published Dec 14, 2025 · Assigned by VulDB

CVE-2025-14659D-Link DIR-860LB1/DIR-868LB1 DHCP command injection

High 8.8

In plain English

A high-severity command injection in DIR-860LB1 from D-Link. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 3.8% (higher than 90% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)3.8%top 10.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack tooling1Public PoC

Official description

A vulnerability was detected in D-Link DIR-860LB1 and DIR-868LB1 203b01/203b03. Affected is an unknown function of the component DHCP Daemon. The manipulation of the argument Hostname results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be used.

Affected products (as reported)

Vendor	Product	Versions
D-Link	DIR-860LB1	203b01203b03
D-Link	DIR-868LB1	203b01203b03

Weakness: CWE-77, CWE-74 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R

References

VDB-336391 | D-Link DIR-860LB1/DIR-868LB1 DHCP command injection vdb-entry, technical-description
VDB-336391 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
Submit #713701 | D-Link DIR-860LB1 v203b03 Command Injection third-party-advisory
Submit #714709 | D-Link DIR-868LB1 v203b01 Command Injection (Duplicate) third-party-advisory
https://tzh00203.notion.site/D-Link-DIR-860LB1-v203b03-Command-Injection-in-DHCPd-2c6b5c52018a807eab1ae73dbd95eee3?source=copy_link related
https://tzh00203.notion.site/D-Link-DIR-868LB1-v203b01-Command-Injection-in-DHCPd-2c8b5c52018a805296c3dea51a7a4070?source=copy_link exploit
https://www.dlink.com/ product