high8.8
CVE-2025-51457
D-Link DAP-2610 up to 2.06B08r099 contains an authenticated command injection vulnerability within the web interface at the /index.xgi endpoint.
Impact
D-Link DAP-2610 up to 2.06B08r099 contains an authenticated command injection vulnerability within the web interface at the /index.xgi endpoint. An attacker with authenticated access can exploit some parameters to execute arbitrary system commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| D-Link | D-Link DAP-2610 | before 2.06B08r099 |
Versions were read from the advisory text. No structured product data has been published for this record yet.