CVE-2025-15194

CriticalCVSS 9.8/10Last modified Oct 7, 2026

Description

A vulnerability was found in D-Link DIR-600 up to 2.15WWb02. Affected by this vulnerability is an unknown functionality of the file hedwig.cgi of the component HTTP Header Handler. The manipulation of the argument Cookie results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119 CWE-121

Affected software

No affected versions have been published.

Timeline

Published: Dec 29, 2025
Last modified: Oct 7, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-151959.8A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file CVE-2025-151969.8A vulnerability was identified in code-projects Assessment Management 1.0. This affects an unknown part of the file login.php. Such manipula CVE-2025-151977.2A security flaw has been discovered in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. This vulnerability affects u CVE-2025-151989.8A weakness has been identified in code-projects College Notes Uploading System 1.0. This issue affects some unknown processing of the file /CVE-2025-151998.8A security vulnerability has been detected in code-projects College Notes Uploading System 1.0. Impacted is an unknown function of the file CVE-2025-15208.0PostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers t CVE-2025-152004.8A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. The affected element is the function getExceptionStatisticsByClient/getComman CVE-2025-152015.4A flaw has been found in SohuTV CacheCloud up to 3.2.0. The impacted element is the function redirectNoPower of the file src/main/java/com/s CVE-2025-152024.8A vulnerability has been found in SohuTV CacheCloud up to 3.2.0. This affects the function taskQueueList of the file src/main/java/com/sohu/CVE-2025-152034.8A vulnerability was found in SohuTV CacheCloud up to 3.2.0. This impacts the function index of the file src/main/java/com/sohu/cache/web/con CVE-2025-152044.8A vulnerability was determined in SohuTV CacheCloud up to 3.2.0. Affected is the function doQuartzList of the file src/main/java/com/sohu/ca CVE-2025-152058.8A vulnerability was identified in code-projects Student File Management System 1.0. Affected by this vulnerability is an unknown functionali