{"metadata": {"vulnerability": "cve-2025-29635", "count": 77, "kinds": {"milestone": 4, "sighting": 44, "kev": 17, "other": 12}}, "data": [{"timestamp": "2025-03-11T00:00:00Z", "date_only": false, "value": "2025-03-11T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-29635", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-03-25T00:00:00Z", "date_only": false, "value": "2025-03-25T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-29635", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-03-25T13:03:40.937Z", "date_only": false, "value": "2025-03-25T13:03:40.937Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2025-29635", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-25T13:23:59Z", "date_only": false, "value": "2025-03-25T13:23:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8651", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "f2d5dee7-5424-4902-96a5-a8b9f22db1b5", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29635\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function, triggering remote command execution.\n\ud83d\udccf Published: 2025-03-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-25T13:03:40.937Z\n\ud83d\udd17 References:\n1. https://github.com/mono7s/Dir-823x/blob/main/set_prohibiting/set_prohibiting.md", "url": "https://t.me/DarkWebInformer_CVEAlerts/8651"}, {"timestamp": "2025-03-25T14:15:29Z", "date_only": false, "value": "2025-03-25T14:15:29Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M9WC-3H85-PP63", "record": "GHSA-M9WC-3H85-PP63", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-03-25T14:15:29.043Z", "date_only": false, "value": "2025-03-25T14:15:29.043", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-29635", "record": "FKIE_CVE-2025-29635", "field": "published"}, {"timestamp": "2025-03-25T15:31:29Z", "date_only": false, "value": "2025-03-25T15:31:29Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M9WC-3H85-PP63", "record": "GHSA-M9WC-3H85-PP63", "field": "published"}, {"timestamp": "2025-03-25T16:49:44.557Z", "date_only": false, "value": "2025-03-25T16:49:44.557202Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll7q2zfffq2j", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "755c784c-1921-42d5-a772-2c14e77160e1", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll7q2zfffq2j"}, {"timestamp": "2025-03-25T17:30:48Z", "date_only": false, "value": "2025-03-25T17:30:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/4yRTt9dy-kSa9hw9IvAX8xqiMQA60h8go96Ck2HC1in5CKw", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "1b72d544-07ea-4849-83ca-e0663b402b8f"}, {"timestamp": "2025-03-25T17:49:20Z", "date_only": false, "value": "2025-03-25T17:49:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/21109", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "275a78f8-a958-4684-89ed-9177688c020e", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-29635 - D-Link DIR-823X Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-29635 \nPublished : March 25, 2025, 2:15 p.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function, triggering remote command execution. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/21109"}, {"timestamp": "2025-03-27T00:00:00Z", "date_only": true, "value": "2025-03-27", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2025-11330", "record": "CNVD-2025-11330", "field": "submitTime"}, {"timestamp": "2025-06-04T00:00:00Z", "date_only": true, "value": "2025-06-04", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2025-11330", "record": "CNVD-2025-11330", "field": "openTime"}, {"timestamp": "2026-04-22T18:04:27Z", "date_only": false, "value": "2026-04-22T18:04:27.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/249198", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "d687d5b1-4b71-493d-a835-6c6d547c2bee", "content": "Mirai Botnet exploits CVE-2025-29635 to target legacy D-Link routers\nhttps://ift.tt/fD7Le5k", "url": "https://t.me/ctinow/249198"}, {"timestamp": "2026-04-22T18:10:04Z", "date_only": false, "value": "2026-04-22T18:10:04.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/47EgD6HRFdjL8lSrN_oseytw7Re77bEJzRFd7eCT8rFsEpNY", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "5e6e52ae-90b8-4791-90e4-138c353c4fe4"}, {"timestamp": "2026-04-22T18:29:34.718Z", "date_only": false, "value": "2026-04-22T18:29:34.718552Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mk44vdcb7624", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "9a814a15-b6bf-4152-a0fd-aa818c219403", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mk44vdcb7624"}, {"timestamp": "2026-04-22T18:46:39.126Z", "date_only": false, "value": "2026-04-22T18:46:39.126116Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mk45tuketq27", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "66a86efb-8733-4ef9-aa04-72f4f8f2fca4", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3mk45tuketq27"}, {"timestamp": "2026-04-22T20:05:05.716Z", "date_only": false, "value": "2026-04-22T20:05:05.716051Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mk4ca4xuiz2l", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "44df19ed-96a1-4c2c-8dd3-fbdbdb2e3d1e", "url": "https://bsky.app/profile/bleepingcomputer.com/post/3mk4ca4xuiz2l"}, {"timestamp": "2026-04-22T20:16:21Z", "date_only": false, "value": "2026-04-22T20:16:21.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/24518", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "5d710fb2-184a-49db-882c-9c7f98d99d86", "content": "\u200aNew Mirai campaign exploits RCE flaw in EoL D-Link routers\n\nA new Mirai-based malware campaign is actively exploiting CVE-2025-29635, a high-severity command-injection vulnerability affecting D-Link DIR-823X routers, to enlist devices into the botnet. [...]\n\nhttps://www.bleepingcomputer.com/news/security/new-mirai-campaign-exploits-rce-flaw-in-eol-d-link-routers/", "url": "https://t.me/BleepingComputer/24518"}, {"timestamp": "2026-04-22T21:02:32.693Z", "date_only": false, "value": "2026-04-22T21:02:32.693052Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mk4fgt2shf2g", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "98b86aad-7d49-4e95-93bc-446ae5a4375c", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mk4fgt2shf2g"}, {"timestamp": "2026-04-22T21:45:18.915Z", "date_only": false, "value": "2026-04-22T21:45:18.915371Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mk4htdnv6d2x", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "3a22fe84-1689-402a-b8df-1446d8bfa4a2", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mk4htdnv6d2x"}, {"timestamp": "2026-04-22T23:29:41.246Z", "date_only": false, "value": "2026-04-22T23:29:41.246831Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mk4nny6jky24", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "4315c353-aca4-4ba2-95fa-ac98b928d641", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3mk4nny6jky24"}, {"timestamp": "2026-04-23T00:00:31.119Z", "date_only": false, "value": "2026-04-23T00:00:31.119595Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mk4pf43qdo2u", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "3b691cda-2225-4194-bb49-0a3487b2b2ab", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mk4pf43qdo2u"}, {"timestamp": "2026-04-23T05:52:39.519Z", "date_only": false, "value": "2026-04-23T05:52:39.519657Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3mk5d2p7vvk2d", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "439ae2cf-12cf-4a40-9606-e776c90cb5b3", "url": "https://bsky.app/profile/pvynckier.bsky.social/post/3mk5d2p7vvk2d"}, {"timestamp": "2026-04-23T06:21:32.415Z", "date_only": false, "value": "2026-04-23T06:21:32.415969Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mk5eogpfv22w", "record": "cve-2025-29635", "field": "creation_timestamp", "uuid": "373c6040-3583-4927-aa3c-5f11c77f806a", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mk5eogpfv22w"}, {"timestamp": "2026-04-23T11:01:06.714Z", "date_only": false, "value": "2026-04-23T11:01:06.714166Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/dragonjar/statuses/116453675237302014", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "78acbf9a-533d-42ed-90b0-7601c99e326b", "url": "https://infosec.exchange/users/dragonjar/statuses/116453675237302014"}, {"timestamp": "2026-04-23T17:42:42.368Z", "date_only": false, "value": "2026-04-23T17:42:42.368574Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mk6kqhf6ss2d", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "f6126f43-a42f-48db-a096-2f92f14d0df3", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mk6kqhf6ss2d"}, {"timestamp": "2026-04-23T21:16:26.050Z", "date_only": false, "value": "2026-04-23T21:16:26.050470Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mk6womi3ok2d", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "f8c71c32-6a31-4779-b899-49bf6890e646", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mk6womi3ok2d"}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": false, "value": "2026-04-24T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-29635", "field": "timestamps.asserted_at", "uuid": "1bcb64f7-0cf2-44a0-9e0e-c0cf67742404", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": true, "value": "2026-04-24", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-29635", "field": "containers.adp.0.metrics.2.other.content.dateAdded"}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": true, "value": "2026-04-24", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2025-29635", "field": "evidence.0.details.date_added", "uuid": "1bcb64f7-0cf2-44a0-9e0e-c0cf67742404", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": false, "value": "2026-04-24T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2025-29635", "field": "timestamps.first_seen_at", "uuid": "1bcb64f7-0cf2-44a0-9e0e-c0cf67742404", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": false, "value": "2026-04-24T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-29635", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": false, "value": "2026-04-24T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-29635", "record": "FKIE_CVE-2025-29635", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": false, "value": "2026-04-24T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2025-29635", "field": "status.status_updated_at", "uuid": "1bcb64f7-0cf2-44a0-9e0e-c0cf67742404", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": false, "value": "2026-04-24T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-29635", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2026-04-24T02:43:01.928Z", "date_only": false, "value": "2026-04-24T02:43:01.928738Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mk7iw463ccrs", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "63088775-ea56-4a0b-9531-b2cde874cc4b", "url": "https://bsky.app/profile/shiojiri.com/post/3mk7iw463ccrs"}, {"timestamp": "2026-04-24T08:04:03.063Z", "date_only": false, "value": "2026-04-24T08:04:03.063912Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mka2u3nqukrs", "record": "cve-2025-29635", "field": "creation_timestamp", "uuid": "28053d07-cd55-4ab8-874b-96d504153df8", "url": "https://bsky.app/profile/shiojiri.com/post/3mka2u3nqukrs"}, {"timestamp": "2026-04-24T17:29:19.051Z", "date_only": false, "value": "2026-04-24T17:29:19.051142Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/116460864002205112", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "591edccb-4156-4807-a4c3-1f8eb7b696e3", "url": "https://infosec.exchange/users/AAKL/statuses/116460864002205112"}, {"timestamp": "2026-04-24T17:50:15.178Z", "date_only": false, "value": "2026-04-24T17:50:15.178049Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116460946332281703", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "4e15a064-bcab-4981-b780-2b6345cb2323", "url": "https://mastodon.social/ap/users/115426718704364579/statuses/116460946332281703"}, {"timestamp": "2026-04-24T17:50:43.073Z", "date_only": false, "value": "2026-04-24T17:50:43.073230Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mkb3npe6wg27", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "b6d31a2a-e54b-438c-a5c3-27fa95191611", "url": "https://bsky.app/profile/netsecio.bsky.social/post/3mkb3npe6wg27"}, {"timestamp": "2026-04-24T18:00:01Z", "date_only": false, "value": "2026-04-24T18:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2025-29635", "field": "timestamps.recorded_at", "uuid": "1bcb64f7-0cf2-44a0-9e0e-c0cf67742404", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-24T18:00:01.887Z", "date_only": false, "value": "2026-04-24T18:00:01.887431Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1bcb64f7-0cf2-44a0-9e0e-c0cf67742404", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "7cbf7320-49cd-45c3-86e5-a15e885675ab", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1bcb64f7-0cf2-44a0-9e0e-c0cf67742404"}, {"timestamp": "2026-04-24T18:30:35Z", "date_only": false, "value": "2026-04-24T18:30:35Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M9WC-3H85-PP63", "record": "GHSA-M9WC-3H85-PP63", "field": "modified"}, {"timestamp": "2026-04-24T19:38:38.814Z", "date_only": false, "value": "2026-04-24T19:38:38.814244Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6334753", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "25535be0-d91a-4458-a9e3-95645b736b79", "url": "https://feedsin.space/feed/CISAKevBot/items/6334753"}, {"timestamp": "2026-04-25T03:55:37.481Z", "date_only": false, "value": "2026-04-25T03:55:37.481Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-29635", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-25T03:55:37.481Z", "date_only": false, "value": "2026-04-25T03:55:37.481Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-29635", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-25T08:28:28Z", "date_only": false, "value": "2026-04-25T08:28:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/stone776/62caf070c1c841dbb439acee42f962a2", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "5daf19c3-ae87-4268-9177-5eeeabccd4a0", "url": "https://gist.github.com/stone776/62caf070c1c841dbb439acee42f962a2"}, {"timestamp": "2026-04-25T21:03:11.947Z", "date_only": false, "value": "2026-04-25T21:03:11.947456Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mkdwuk7fub2g", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "51e289a4-62c5-4e54-b7f0-0c6ec57dd8c0", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mkdwuk7fub2g"}, {"timestamp": "2026-04-27T01:02:53Z", "date_only": false, "value": "2026-04-27T01:02:53+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2025-29635", "field": "timestamps.asserted_at", "uuid": "34ec8177-b8c1-444c-955f-7234284ca382", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-27T01:02:53Z", "date_only": false, "value": "2026-04-27T01:02:53+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2025-29635", "field": "timestamps.first_seen_at", "uuid": "34ec8177-b8c1-444c-955f-7234284ca382", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-27T20:40:28.288Z", "date_only": false, "value": "2026-04-27T20:40:28.288429Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mkiwjvrbw223", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "b8383176-82fa-4989-92ef-31aaba199cb2", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mkiwjvrbw223"}, {"timestamp": "2026-04-28T23:34:46.745Z", "date_only": false, "value": "2026-04-28T23:34:46.745915Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mklqqlpops2w", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "786be539-928e-4455-b8de-606bd0252bef", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mklqqlpops2w"}, {"timestamp": "2026-05-01T12:57:28.740Z", "date_only": false, "value": "2026-05-01T12:57:28.740903Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/threatcodex/statuses/116499431109566275", "record": "cve-2025-29635", "field": "creation_timestamp", "uuid": "b3defa14-7500-459d-89b2-f2609cc443eb", "content": "Mirai Turns Unsupported D-Link Routers into DDoS Weapons Using CVE-2025-29635#CVE_2025_29635 #Mirai https://www.secpod.com/blog/mirai-turns-unsupported-d-link-routers-into-ddos-weapons-using-cve-2025-29635/", "url": "https://infosec.exchange/users/threatcodex/statuses/116499431109566275"}, {"timestamp": "2026-05-08T00:00:00Z", "date_only": true, "value": "2026-05-08", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2025-29635", "field": "evidence.0.details.due_date", "uuid": "1bcb64f7-0cf2-44a0-9e0e-c0cf67742404", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T13:23:43Z", "date_only": false, "value": "2026-06-01T13:23:43+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-29635", "field": "timestamps.asserted_at", "uuid": "53b6d067-d05f-4dc8-acde-9b58617a3674", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T13:23:43Z", "date_only": false, "value": "2026-06-01T13:23:43+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-29635", "field": "timestamps.first_seen_at", "uuid": "53b6d067-d05f-4dc8-acde-9b58617a3674", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T13:23:43Z", "date_only": false, "value": "2026-06-01T13:23:43+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-29635", "field": "status.status_updated_at", "uuid": "53b6d067-d05f-4dc8-acde-9b58617a3674", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T13:23:43.718Z", "date_only": false, "value": "2026-06-01T13:23:43.718Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-29635", "field": "evidence.0.details.added_date", "uuid": "53b6d067-d05f-4dc8-acde-9b58617a3674", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T09:05:33.707Z", "date_only": false, "value": "2026-06-17T09:05:33.707", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-29635", "record": "FKIE_CVE-2025-29635", "field": "lastModified"}, {"timestamp": "2026-06-19T12:45:12.655Z", "date_only": false, "value": "2026-06-19T12:45:12.655186Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/59e7059b-ebb2-4fbb-b123-75d55b192356", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "2b814dae-5104-4e9b-b769-a20bd5cbf524", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/59e7059b-ebb2-4fbb-b123-75d55b192356"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-29635", "field": "timestamps.recorded_at", "uuid": "53b6d067-d05f-4dc8-acde-9b58617a3674", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:03:38.846Z", "date_only": false, "value": "2026-06-23T14:03:38.846651Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/53b6d067-d05f-4dc8-acde-9b58617a3674", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "3aac5ce4-3eab-44c1-b349-7963fb858d4e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/53b6d067-d05f-4dc8-acde-9b58617a3674"}, {"timestamp": "2026-06-30T09:23:58.873Z", "date_only": false, "value": "2026-06-30T09:23:58.873969Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/34ec8177-b8c1-444c-955f-7234284ca382", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "2d7aec7f-92bd-42f7-bb7c-2a7319f4ae5a", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/34ec8177-b8c1-444c-955f-7234284ca382"}, {"timestamp": "2026-07-10T00:00:00Z", "date_only": false, "value": "2026-07-10T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2025-29635", "field": "timestamps.last_seen_at", "uuid": "34ec8177-b8c1-444c-955f-7234284ca382", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-10T00:00:00Z", "date_only": true, "value": "2026-07-10", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2025-29635", "field": "evidence.0.details.observation_date", "uuid": "34ec8177-b8c1-444c-955f-7234284ca382", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-10T00:00:00Z", "date_only": false, "value": "2026-07-10T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2025-29635", "field": "status.status_updated_at", "uuid": "34ec8177-b8c1-444c-955f-7234284ca382", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-10T10:15:07.516Z", "date_only": false, "value": "2026-07-10T10:15:07.516842Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-09)", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "5ef682f5-4ef0-4cde-8ffe-6ba629f5b75b"}, {"timestamp": "2026-07-11T10:15:12.660Z", "date_only": false, "value": "2026-07-11T10:15:12.660827Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-10)", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "29632c09-d8b0-4f25-b4a8-9e6be8eaeff3"}, {"timestamp": "2026-07-12T01:00:02Z", "date_only": false, "value": "2026-07-12T01:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2025-29635", "field": "timestamps.recorded_at", "uuid": "34ec8177-b8c1-444c-955f-7234284ca382", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-25T15:00:07.824Z", "date_only": false, "value": "2026-07-25T15:00:07.824329Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/670", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "58152677-7f9c-462d-9126-f7564bf69389", "content": "\u0421\u0442\u0430\u0440\u044b\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b D-Link \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0442 \u0434\u043b\u044f DDoS-\u0430\u0442\u0430\u043a\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-29635 (CVSS: 8.8) \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 D-Link DIR-823X. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 POST-\u0437\u0430\u043f\u0440\u043e\u0441, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b. \u0422\u0430\u043a \u043d\u0430 \u0440\u043e\u0443\u0442\u0435\u0440 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 tuxnokill \u043d\u0430 \u0431\u0430\u0437\u0435 Mirai.\n\n\u0417\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u043c\u043e\u0449\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b: \u043f\u0435\u0440\u0435\u0433\u0440\u0443\u0437\u043a\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c \u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b. \u0422\u0430 \u0436\u0435 \u0433\u0440\u0443\u043f\u043f\u0430 \u043f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 TP-Link \u0438 ZTE ZXV10 H108L \u043f\u043e \u0438\u0434\u0435\u043d\u0442\u0438\u0447\u043d\u043e\u0439 \u0441\u0445\u0435\u043c\u0435.\n\n\u0421\u0438\u0442\u0443\u0430\u0446\u0438\u044e \u0443\u0441\u0443\u0433\u0443\u0431\u043b\u044f\u0435\u0442 \u0442\u043e, \u0447\u0442\u043e D-Link \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u043b\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430 \u0438 \u043d\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439. \u0412\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0442\u0430\u043a\u0438\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u043e\u0432 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0437\u0430\u0434\u0443\u043c\u0430\u0442\u044c\u0441\u044f \u043e \u0437\u0430\u043c\u0435\u043d\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0430 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u2014 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438 \u0441\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n#\u0440\u043e\u0443\u0442\u0435\u0440 #\u0431\u043e\u0442\u043d\u0435\u0442 #ddos #mirai \n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/670"}, {"timestamp": "2026-07-26T00:00:36.868Z", "date_only": false, "value": "2026-07-26T00:00:36.868548Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/670", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "27168f8e-08e5-40b7-b138-39d519799891", "content": "\u0421\u0442\u0430\u0440\u044b\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b D-Link \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0442 \u0434\u043b\u044f DDoS-\u0430\u0442\u0430\u043a\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-29635 (CVSS: 8.8) \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 D-Link DIR-823X. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 POST-\u0437\u0430\u043f\u0440\u043e\u0441, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b. \u0422\u0430\u043a \u043d\u0430 \u0440\u043e\u0443\u0442\u0435\u0440 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 tuxnokill \u043d\u0430 \u0431\u0430\u0437\u0435 Mirai.\n\n\u0417\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u043c\u043e\u0449\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b: \u043f\u0435\u0440\u0435\u0433\u0440\u0443\u0437\u043a\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c \u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b. \u0422\u0430 \u0436\u0435 \u0433\u0440\u0443\u043f\u043f\u0430 \u043f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 TP-Link \u0438 ZTE ZXV10 H108L \u043f\u043e \u0438\u0434\u0435\u043d\u0442\u0438\u0447\u043d\u043e\u0439 \u0441\u0445\u0435\u043c\u0435.\n\n\u0421\u0438\u0442\u0443\u0430\u0446\u0438\u044e \u0443\u0441\u0443\u0433\u0443\u0431\u043b\u044f\u0435\u0442 \u0442\u043e, \u0447\u0442\u043e D-Link \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u043b\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430 \u0438 \u043d\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439. \u0412\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0442\u0430\u043a\u0438\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u043e\u0432 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0437\u0430\u0434\u0443\u043c\u0430\u0442\u044c\u0441\u044f \u043e \u0437\u0430\u043c\u0435\u043d\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0430 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u2014 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438 \u0441\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n#\u0440\u043e\u0443\u0442\u0435\u0440 #\u0431\u043e\u0442\u043d\u0435\u0442 #ddos #mirai \n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/670"}, {"timestamp": "2026-07-29T12:03:14.223Z", "date_only": false, "value": "2026-07-29T12:03:14.223311Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysadm_in_up/2552", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "3068ccc1-799d-429f-9276-8b8057e6986c", "content": "CVE-2025-29635: Mirai Campaign Targets D-Link Devices\n\nhttps://www.akamai.com/blog/security-research/2026/apr/cve-2025-29635-mirai-campaign-targets-d-link-devices", "url": "https://t.me/sysadm_in_up/2552"}, {"timestamp": "2026-08-03T23:00:13.429Z", "date_only": false, "value": "2026-08-03T23:00:13.429104Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/sysadm_in_up/2552", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "75fe6da5-19e5-46f4-9025-91adc167023b", "content": "CVE-2025-29635: Mirai Campaign Targets D-Link Devices\n\nhttps://www.akamai.com/blog/security-research/2026/apr/cve-2025-29635-mirai-campaign-targets-d-link-devices", "url": "https://t.me/sysadm_in_up/2552"}, {"timestamp": "2026-08-14T10:00:16.762Z", "date_only": false, "value": "2026-08-14T10:00:16.762793Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-13)", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "c7dd0a54-1a3c-442d-8c2b-658f8ad5c965"}, {"timestamp": "2026-08-18T19:00:03.848Z", "date_only": false, "value": "2026-08-18T19:00:03.848094Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/VulnerabilityNews/42105", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "90a7a51f-2892-4c11-89f5-c4055bb9e9ce", "content": "New Mirai campaign exploits RCE flaw in EoL D-Link routers\n\nA new Mirai-based malware campaign is actively exploiting CVE-2025-29635, a high-severity command-injection vulnerability affecting D-Link DIR-823X routers, to enlist devices into the botnet. [...]\nhttps://www.bleepingcomputer.com/news/security/new-mirai-campaign-exploits-rce-flaw-in-eol-d-link-routers/", "url": "https://t.me/VulnerabilityNews/42105"}, {"timestamp": "2026-08-18T19:00:03.965Z", "date_only": false, "value": "2026-08-18T19:00:03.965908Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/VulnerabilityNews/42162", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "4e080536-fa9a-464a-bd8c-be96c20b6cd5", "content": "CISA Adds Four Known Exploited Vulnerabilities to Catalog\n\nCISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2024-7399\u00a0Samsung\u00a0MagicINFO\u00a09 Server Path Traversal Vulnerability\nCVE-2024-57726\u00a0SimpleHelp\u00a0Missing Authorization Vulnerability\nCVE-2024-57728\u00a0SimpleHelp\u00a0Path Traversal Vulnerability\nCVE-2025-29635\u00a0D-Link DIR-823X Command Injection Vulnerability\u00a0\nThese\u00a0types\u00a0of vulnerabilities\u00a0are\u00a0frequent attack vectors\u00a0for malicious cyber actors and pose significant risks to the federal enterprise.\u00a0\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities\u00a0established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the\u00a0BOD 22-01 Fact Sheet\u00a0for more information.\u00a0\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing\u00a0timely\u00a0remediation of\u00a0KEV Catalog vulnerabilities\u00a0as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the\u00a0specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/04/24/cisa-adds-four-known-exploited-vulnerabilities-catalog", "url": "https://t.me/VulnerabilityNews/42162"}, {"timestamp": "2026-08-19T00:00:10.137Z", "date_only": false, "value": "2026-08-19T00:00:10.137074Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/VulnerabilityNews/42105", "record": "CVE-2025-29635", "field": "creation_timestamp", "uuid": "9c80d3ab-18af-4d96-84c2-9936c9cbbaf1", "content": "New Mirai campaign exploits RCE flaw in EoL D-Link routers\n\nA new Mirai-based malware campaign is actively exploiting CVE-2025-29635, a high-severity command-injection vulnerability affecting D-Link DIR-823X routers, to enlist devices into the botnet. [...]\nhttps://www.bleepingcomputer.com/news/security/new-mirai-campaign-exploits-rce-flaw-in-eol-d-link-routers/", "url": "https://t.me/VulnerabilityNews/42105"}]}