CVE-2025-15193

High · 8.8

CVSS

8.8

EPSS

0.8%

Published

Dec 29, 2025

CISA due date

—

The record

A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. This affects the function sub_423848 of the file /boafrm/formParentControl. Performing manipulation of the argument submit-url results in buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used.

Affected packages

Ecosystem	Package	Introduced	Fixed