CVE-2025-60854

A command injection vulnerability exists in the D-Link R15 (AX1500) router, specifically affecting versions 1.20.01 and below . The root cause is the improper neutralization of special elements in the model name parameter during a password change request within the web administrator page. An atta...