CVE-2025-13188: D-Link DIR-816L authentication.cgi authenticationcgi_main stack-based overflow

Published Nov 14, 2025

Updated

A vulnerability was detected in D-Link DIR-816L 206b09beta. Affected by this vulnerability is the function authenticationcgimain of the file /authentication.cgi. Performing manipulation of the argument Password results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Affected Software

3 affected components

D-Link DIR-816L

All of the following

Dlink Dir-816l Firmware=2.06.b09-beta

Dlink DIR-816L

Event History

Nov 14, 2025

CVE Published

via MITRE·10:32 PM

Data Sourced

via MITRE·10:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·11:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-13188?

CVE-2025-13188 is considered critical due to its potential for remote exploitation via stack-based buffer overflow.

How do I fix CVE-2025-13188?

To mitigate CVE-2025-13188, update the D-Link DIR-816L to the latest firmware that addresses this vulnerability.

What devices are affected by CVE-2025-13188?

CVE-2025-13188 specifically affects the D-Link DIR-816L router running firmware version 2_06_b09_beta.

What type of vulnerability is CVE-2025-13188?

CVE-2025-13188 is a stack-based buffer overflow vulnerability affecting the authentication component of the device.

Can CVE-2025-13188 be exploited remotely?

Yes, CVE-2025-13188 can be exploited remotely, allowing attackers to execute code on the affected D-Link DIR-816L router.