Critical severity9.8NVD Advisory· Published Dec 2, 2025· Updated Jun 17, 2026
CVE-2025-60854
CVE-2025-60854
Description
A vulnerability has been found in D-Link R15 (AX1500) 1.20.01 and below. By manipulating the model name parameter during a password change request in the web administrator page, it is possible to trigger a command injection in httpd.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<=1.20.01+ 1 more
- (no CPE)range: <=1.20.01
- (no CPE)
Patches
Vulnerability mechanics
References
1- supportannouncement.us.dlink.com/security/publication.aspxnvdVendor Advisory
News mentions
0No linked articles in our index yet.