CVE-2025-71057

High severity, CVSS 8.2. EPSS: 0.1% chance of exploitation in the next 30 days.

Improper session management in D-Link Wireless N 300 ADSL2+ Modem Router DSL-124 ME_1.00 allows attackers to execute a session hijacking attack via spoofing the IP address of an authenticated user.

Published 2026-02-26. Last modified 2026-07-05.