CVE-2025-15190
High · 8.8CVSS
8.8
EPSS
0.8%
Published
Dec 29, 2025
CISA due date
—
The record
A security flaw has been discovered in D-Link DWR-M920 up to 1.1.50. Impacted is the function sub_42261C of the file /boafrm/formFilter. The manipulation of the argument ip6addr results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been released to the public and may be exploited.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|