CVE-2025-11665: D-Link DAP-2695 Firmware Update rgbin fwupdater_main os command injection

Published Oct 13, 2025

Updated

A vulnerability was detected in D-Link DAP-2695 2.00RC131. This affects the function fwupdatermain of the file rgbin of the component Firmware Update Handler. Performing manipulation results in os command injection. The attack may be initiated remotely. This vulnerability only affects products that are no longer supported by the maintainer.

Affected Software

3 affected components

D-Link DAP-2695

All of the following

Dlink Dap-2695 Firmware=2.00-rc131

Dlink DAP-2695

Event History

Oct 13, 2025

CVE Published

via MITRE·06:32 AM

Data Sourced

via MITRE·06:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11665?

CVE-2025-11665 is a high severity vulnerability due to its capability for remote command injection.

How do I mitigate CVE-2025-11665?

To mitigate CVE-2025-11665, it is recommended to update the firmware of the D-Link DAP-2695 to the latest version provided by the vendor.

What type of attack does CVE-2025-11665 allow?

CVE-2025-11665 allows for remote OS command injection attacks through the firmware update handler.

Which product is affected by CVE-2025-11665?

CVE-2025-11665 affects the D-Link DAP-2695 access point.

Can CVE-2025-11665 be exploited remotely?

Yes, CVE-2025-11665 can be exploited remotely due to vulnerabilities in the firmware update mechanism.