D-Link Severity Router Vulnerability Disclosed: CVE-2025-15190 A new security vulnerability, tracked as CVE-2025-15190, was publicly disclosed on 28 December 2025 and affects D-Link DWR-M920 routers running firmware version 1.1.50 and earlier. The flaw is a stack-based...

[UK Sentinel]

A new  security vulnerability, tracked as CVE-2025-15190, was publicly disclosed on 28 December 2025 and affects D-Link DWR-M920 routers running firmware version 1.1.50 and earlier.

The flaw is a stack-based buffer overflow in the router’s web management interface. It can potentially be exploited remotely by sending specially crafted requests to the device, which may lead to crashes or, in worst-case scenarios, further compromise of the router.

https://www.tenable.com/cve/CVE-2025-15190

Share the knowledge

In a completely sane world, madness is the only freedom (J.G.Ballard).

You need to login in order to vote

[Author]

Posts