CVE-2025-13190

CVE-2025-13190 is a high-severity stack-based buffer overflow vulnerability affecting the D-Link DIR-816L 2_06_b09_beta router, specifically within the scandir_main function of the /portal/__ajax_exporer.sgi file. This flaw allows for remote exploitation by manipulating the 'en' argument, potentially leading to full compromise of the device. With a CVSS score of 8.8 (High), the vulnerability poses a significant risk due to its network-based attack vector and low attack complexity, enabling high impact on confidentiality, integrity, and availability. While public exploit code exists, there is no evidence of active exploitation, and it has garnered minimal community discussion or media coverage. It is critical to note that this vulnerability affects end-of-life products, meaning no official patches will be released.