CVE-2025-7206

CVE-2025-7206 is a critical stack-based buffer overflow vulnerability affecting D-Link DIR-825 2.10 routers, specifically within the switch_language.cgi component of the httpd service. This flaw allows for remote exploitation by manipulating the 'Language' argument. With a CVSS score of 9.8 (Critical), the vulnerability presents a significant risk due to its network-based attack vector, low attack complexity, and high potential for confidentiality, integrity, and availability compromise. While the exploit has been publicly disclosed, there is no evidence of active exploitation, and it primarily impacts products no longer supported by the vendor, though it has garnered notable community discussion.