Security Advisory
CVE-2025-34248
N/A
UNKNOWN
Vulnerability Description
D-Link Nuclias Connect firmware versions < 1.3.1.4 contain a directory traversal vulnerability within /api/web/dnc/global/database/deleteBackup due to improper sanitization of the deleteBackupList parameter. This can allow an authenticated attacker to delete arbitrary files impacting the integrity and availability of the system.
Published Date
October 9, 2025
Official Source
NIST NVD Advisory