Description
D-Link DAP-2610 up to 2.06B08r099 contains an authenticated command injection vulnerability within the web interface at the /index.xgi endpoint. An attacker with authenticated access can exploit some parameters to execute arbitrary system commands.
Advisories 1
- WID-SEC-2025-1153 D-LINK Access Point (AP): Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Sep 27, 2026