Advisories · Technology

D-Link DAP-2695.

Every CVE that names D-Link DAP-2695 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-12296 CVE record

CVSS 5.1 Medium

D-Link DAP-2695 Firmware Update sub_4174B0 os command injection
- D-Link DAP-2695
- Command injection
Not analysed yet 27 Oct 2025
CVE-2025-12295 CVE record

CVSS 7.5 High

D-Link DAP-2695 Firmware Update sub_40C6B8 signature verification
- D-Link DAP-2695
- Weak cryptography or TLS
- CWE-345
Not analysed yet 27 Oct 2025
CVE-2025-11665 CVE record

CVSS 5.1 Medium

D-Link DAP-2695 Firmware Update rgbin fwupdater_main os command injection
- D-Link DAP-2695
- Command injection
Not analysed yet 13 Oct 2025
CVE-2025-4860 CVE record

CVSS 4.8 Medium

D-Link DAP-2695 Static Pool Settings Page adv_dhcps.php cross site scripting
- D-Link DAP-2695
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 18 May 2025
CVE-2025-4859 CVE record

CVSS 4.8 Medium

D-Link DAP-2695 MAC Bypass Settings Page adv_macbypass.php cross site scripting
- D-Link DAP-2695
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 18 May 2025
CVE-2025-4858 CVE record

CVSS 4.8 Medium

D-Link DAP-2695 ARP Spoofing Prevention Page adv_arpspoofing.php cross site scripting
- D-Link DAP-2695
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 18 May 2025