What’s Vulnerable › Vulnerabilities

CVE-2025-51457

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-25 · updated 2026-10-14
• Weakness: CWE-77

Description

D-Link DAP-2610 up to 2.06B08r099 contains an authenticated command injection vulnerability within the web interface at the /index.xgi endpoint. An attacker with authenticated access can exploit some parameters to execute arbitrary system commands.

References

• https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10428
• https://www.dlink.com/en/security-bulletin/
• https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10428

Get alerted when CVE-2025-51457 or the next vulnerability affects your stack