CVE-2025-14528 Scanner
CVE-2025-14528 Scanner - Authentication Bypass vulnerability in D-Link DIR-803
Used 3k times · 5.9k assets checked · domain, subdomain, ipv4
CVE
CVE-2025-14528
5.5
CVSSmedium
Exploitable remotely over the internet · no authentication required.
Description
A vulnerability was detected in D-Link DIR-803 up to 1.04. Impacted is an unknown function of the file /getcfg.php of the component Configuration Handler. The manipulation of the argument AUTHORIZED_GROUP results in information disclosure. The attack may be performed from remote. The exploit is now public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
dir-803
Updated Sep 18, 2026View on NVD →
S4E scanner
CVE history: dir-803
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →