What is GHSA-v8p6-37g7-5wmc?

GHSA-v8p6-37g7-5wmc is a security advisory published by GitHub Security Advisories with High severity. D-Link DAP-2610 up to 2.06B08r099 contains an authenticated command injection vulnerability...

Which CVE IDs does GHSA-v8p6-37g7-5wmc cover?

GHSA-v8p6-37g7-5wmc covers the following CVE IDs: CVE-2025-51457. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-v8p6-37g7-5wmc?

GHSA-v8p6-37g7-5wmc has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-v8p6-37g7-5wmcHighCVSS 8.8

D-Link DAP-2610 up to 2.06B08r099 contains an authenticated command injection vulnerability...

Vendor

GitHub Security Advisories

Published

September 25, 2026

Last Modified

September 25, 2026

🔗 CVE IDs covered (1)

CVE-2025-51457 →

📋 Description

D-Link DAP-2610 up to 2.06B08r099 contains an authenticated command injection vulnerability within the web interface at the /index.xgi endpoint. An attacker with authenticated access can exploit some parameters to execute arbitrary system commands.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2025-51457
https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10428
https://www.dlink.com/en/security-bulletin
https://github.com/advisories/GHSA-v8p6-37g7-5wmc