CVE-2025-8155: D-Link DCS-6010L Management Application vb.htm cross site scripting

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 25.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-07-25 · updated 2026-06-17
Weakness: CWE-79

Description

A vulnerability has been found in D-Link DCS-6010L 1.15.03 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /vb.htm of the component Management Application. The manipulation of the argument paratest leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

D-Link DCS-6010L: 1.15.03

References

https://vuldb.com/?ctiid.317569
https://vuldb.com/?id.317569
https://vuldb.com/?submit.620531
https://www.dlink.com/

Get alerted when CVE-2025-8155 or the next vulnerability affects your stack