Is CVE-2025-51457 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-51457 being exploited in the wild.

How severe is CVE-2025-51457?

High severity, with a CVSS score of 8.8, published 25 September 2026.

Which products and versions are affected?

D-Link DAP-2610 2.06B08r099 and earlier.

Is there a fix for CVE-2025-51457?

A patch was published on 2025-05-27: Fixed in firmware version 2.06B11r102 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2025-51457 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2025-51457?

Check whether you run D-Link DAP-2610 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-51457: D-Link DAP-2610 authenticated command injection in web interface

CVE-2025-51457 · Severity: high · CVSS 8.8 · Published 2026-09-25

D-Link's DAP-2610 wireless access point contains a command injection flaw in its web administration interface that allows an attacker with login credentials to execute arbitrary system commands on the device. An attacker exploiting this vulnerability could gain complete control of the access point, potentially allowing them to intercept network traffic, launch attacks on connected devices, or pivot deeper into the network.

Vendors: D-Link.

Quick answers

Is CVE-2025-51457 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-51457 being exploited in the wild.
How severe is CVE-2025-51457?: High severity, with a CVSS score of 8.8, published 25 September 2026.
Which products and versions are affected?: D-Link DAP-2610 2.06B08r099 and earlier.
Is there a fix for CVE-2025-51457?: A patch was published on 2025-05-27: Fixed in firmware version 2.06B11r102 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2025-51457 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2025-51457?: Check whether you run D-Link DAP-2610 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is an authenticated command injection in the /index.xgi endpoint where parameters such as "date" and "time" are not properly sanitized, allowing backtick shell metacharacters to be injected and executed. The attack requires an authenticated login session to the web interface. An attacker with valid credentials can execute arbitrary OS commands with the privileges of the web service, leading to full device compromise.

Affected products

D-Link DAP-2610 2.06B08r099 and earlier

Timeline

2025-05-12: disclosed: Vulnerability reported by third party
2025-05-27: advisory: D-Link security advisory SAP10428 published
2025-05-27: patched: Fixed in firmware version 2.06B11r102
2026-09-25: other: CVE-2025-51457 published in NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.