CyberHappenings logo
☰
Home Browse About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

D-Link DIR-878 routers affected by multiple RCE vulnerabilities

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

D-Link has disclosed four vulnerabilities in its end-of-life DIR-878 router, including three remotely exploitable command execution flaws. The vulnerabilities affect all models and hardware revisions of the router, which is still available for purchase. D-Link has warned that it will not release security updates for this model and recommends replacing it with an actively supported product. The vulnerabilities include CVE-2025-60672 and CVE-2025-60673, which allow remote unauthenticated command execution via unsanitized parameters, and CVE-2025-60674, a stack overflow in USB storage handling. Proof-of-concept exploit code has been published by a researcher, increasing the risk of exploitation by threat actors.

Timeline

  1. 20.11.2025 17:38 1 articles · 23h ago

    D-Link discloses RCE vulnerabilities in end-of-life DIR-878 routers

    D-Link has disclosed four vulnerabilities in its end-of-life DIR-878 router, including three remotely exploitable command execution flaws. The vulnerabilities affect all models and hardware revisions of the router, which is still available for purchase. Proof-of-concept exploit code has been published by a researcher, increasing the risk of exploitation by threat actors. D-Link has warned that it will not release security updates for this model and recommends replacing it with an actively supported product.

    Show sources
    Open in new tab

Information Snippets