CVE-2025-13190 | D-Link DIR-816L 2_06_b09_beta __ajax_exporer.sgi scandir_main en stack-based overflow

November 14, 2025 Yanac

A vulnerability was found in D-Link DIR-816L 2_06_b09_beta. It has been declared as critical. This vulnerability affects the function scandir_main of the file /portal/__ajax_exporer.sgi. The manipulation of the argument en results in stack-based buffer overflow. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability was named CVE-2025-13190. The attack may be performed from remote. In addition, an exploit is available.VulDB Recent EntriesRead More