High severityNVD Advisory· Published Oct 9, 2025· Updated Apr 15, 2026

CVE-2025-34248

Description

D-Link Nuclias Connect firmware versions < 1.3.1.4 contain a directory traversal vulnerability within /api/web/dnc/global/database/deleteBackup due to improper sanitization of the deleteBackupList parameter. This can allow an authenticated attacker to delete arbitrary files impacting the integrity and availability of the system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dlink/Nuclias Connectllm-fuzzy
Range: <1.3.1.4

Patches

Vulnerability mechanics

References

supportannouncement.us.dlink.com/security/publication.aspxnvd
www.dlink.com/en/for-business/nuclias/nuclias-connectnvd
www.vulncheck.com/advisories/dlink-nuclias-connect-directory-traversal-to-arbitrary-file-deletionnvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000