CVE-2025-12296 | D-Link DAP-2695 2.00RC13 Firmware Update sub_4174B0 os command injection

October 26, 2025 Yanac

A vulnerability marked as critical has been reported in D-Link DAP-2695 2.00RC13. The impacted element is the function sub_4174B0 of the component Firmware Update Handler. The manipulation leads to os command injection. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is listed as CVE-2025-12296. The attack may be initiated remotely. In addition, an exploit is available.VulDB Recent EntriesRead More