CVE-2025-63932

7.3 highEPSS 8.1%

High (7.3) in dlink dir-868l firmware. EPSS 8.1% chance of exploitation in the next 30 days.

D-Link Router DIR-868L A1 FW106KRb01.bin has an unauthenticated remote code execution vulnerability in the cgibin binary. The HNAP service provided by cgibin does not filter the HTTP SOAPAction header field. The unauthenticated remote attacker can execute the shell command.

Severity

CVSS 3.1

7.3 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS: 8.1% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2025-11-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dlink:dir-868l_firmware

References

https://github.com/WhereisRain/DIR-868
https://github.com/WhereisRain/DIR-868/tree/main
https://www.dlink.com/en/security-bulletin/

Check your stack JSON