Mirai Botnet Exploits Critical RCE Flaw in End-of-Life D-Link Routers

#cybersecurity #infosec

Summary

A Mirai-based botnet campaign is actively exploiting CVE-2025-29635, a command injection flaw in end-of-life D-Link DIR-823X routers, to execute remote code via crafted POST requests and enlist devices for DDoS attacks.

Take Action:

If you are using D-Link DIR-823X routerm you are under attack. Make sure its management interface is isolated from the internet and accessible only from trusted networks. Since this device is end-of-life with no patch coming for CVE-2025-29635, replace it with a currently supported model.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines