CVE-2025-51457

Name of the Vulnerable Software and Affected Versions D-Link DAP-2610 versions prior to 2.06B08r099

Description An authenticated command injection issue exists within the web interface at the '/index.xgi' endpoint. An attacker with authenticated access can exploit specific parameters to execute arbitrary system commands. Command injection is a flaw that allows an attacker to execute unauthorized operating system commands on the host.

Recommendations Update D-Link DAP-2610 to a version newer than 2.06B08r099. Restrict access to the '/index.xgi' endpoint to minimize the risk of exploitation.