CVE-2025-6896

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical has been found in D-Link DI-7300G+ 19.12.25A1. Affected is an unknown function of the file wget_test.asp. The manipulation of the argument url leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77CWE-78

Affected software

No affected versions have been published.

Timeline

Published
Jun 30, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-689604.7Multi-thread race condition vulnerability in the video framework module. Impact: Successful exploitation of this vulnerability may affect avCVE-2025-689614.7Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect aCVE-2025-689624.7Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect aCVE-2025-689635.3Man-in-the-middle attack vulnerability in the Clone module. Impact: Successful exploitation of this vulnerability may affect service confideCVE-2025-689645.5Data verification vulnerability in the HiView module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2025-689655.5Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affect service confidentiaCVE-2025-689665.5Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affect service confidentiaCVE-2025-689675.5Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability may affect service cCVE-2025-689687.8Double free vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect the input functioCVE-2025-689694.7Multi-thread race condition vulnerability in the thermal management module. Impact: Successful exploitation of this vulnerability may affectCVE-2025-68979.8A vulnerability classified as critical was found in D-Link DI-7300G+ 19.12.25A1. Affected by this vulnerability is an unknown functionality CVE-2025-689705.5Permission verification bypass vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect s
CVE-2025-6896: High severity, CVSS 8.8 | Vulnix