CVE-2025-63932: D-Link Dir-868l Firmware

High severity, CVSS 7.3. EPSS: 7.6% chance of exploitation in the next 30 days.

D-Link Router DIR-868L A1 FW106KRb01.bin has an unauthenticated remote code execution vulnerability in the cgibin binary. The HNAP service provided by cgibin does not filter the HTTP SOAPAction header field. The unauthenticated remote attacker can execute the shell command.

Affected products

• D-Link Dir-868l Firmware: version fw106krb01 only

Published 2025-11-19. Last modified 2026-06-17.