CVE-2025-50672 D-Link CVE debrief

Who should care

Users of D-Link DI-8003 16.07.26A1, security teams, and vulnerability management teams should assess and potentially apply vendor remediation. Affected operators and platforms require review of compensating controls and monitoring for potential exploitation attempts.

Technical summary

The vulnerability, CVE-2025-50672, has a CVSS score of 7.5 and is classified as HIGH severity. It is caused by improper handling of parameters in the /yyxz_dlink.asp endpoint of D-Link DI-8003 16.07.26A1. The CVSS vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating Network attack vector, Low attack complexity, No privileges required, No user interaction, Unchanged scope, No confidentiality impact, No integrity impact, and High availability impact.

Defensive priority

Apply vendor remediation as soon as possible and review compensating controls

Recommended defensive actions

• Inventory and assess D-Link DI-8003 16.07.26A1 for exposure
• Apply vendor remediation
• Monitor for potential exploitation attempts
• Review compensating controls for exposed systems
• Check relevant monitoring, detection, and logs for exposed assets
• Track exceptions and retest remediated assets

Evidence notes

The CVE record and NVD entry provide the primary official records for this vulnerability. Evidence is limited, and further verification is recommended. Defenders should verify affected product deployments, review official advisories, and assess potential exposure. Limited source detail suggests exercising caution and monitoring for potential exploitation attempts.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.