VULNERABILITY INTELLIGENCE
CVE-2025-34248
EPSS probability0.66%
CISA KEVNot currently listed
Published2025-10-09
Last modified2026-10-23
Description
D-Link Nuclias Connect firmware versions < 1.3.1.4 contain a directory traversal vulnerability within /api/web/dnc/global/database/deleteBackup due to improper sanitization of the deleteBackupList parameter. This can allow an authenticated attacker to delete arbitrary files impacting the integrity and availability of the system.
Weakness classification
- disclosure@vulncheck.com: CWE-22