Dashboard / CVE-2025-63932

CVE-2025-63932

HIGH
MEDIUM Priority: 0.59 BB Relevance: 76/100
Published: 2025-11-19 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: Low
I: Low
A: Low

Description

D-Link Router DIR-868L A1 FW106KRb01.bin has an unauthenticated remote code execution vulnerability in the cgibin binary. The HNAP service provided by cgibin does not filter the HTTP SOAPAction header field. The unauthenticated remote attacker can execute the shell command.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
dlink dir-868l_firmware fw106krb01

References & Advisories (3)

https://github.com/WhereisRain/DIR-868
Exploit Third Party Advisory

Bug Bounty Relevance

76 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

7.3 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS — Exploitation Probability

8.08%
Raw Score 0.080820
Percentile 94.9%
Date 2026-11-14

EPSS Trend

2026-11-14
0.08082
2026-11-13
0.08082
2026-11-12
0.08082
2026-11-10
0.08082
2026-11-09
0.08082
2026-11-08
0.08082
2026-11-07
0.08082
2026-11-06
0.08082
2026-11-05
0.08082
2026-11-04
0.08082

Intelligence Sources

nvd ref →

External Links