Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Mon, 24 Aug 2026 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
D-link
D-link di-7001 Mini |
|
| Vendors & Products |
D-link
D-link di-7001 Mini |
Mon, 24 Aug 2026 21:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Remote Command Execution via msp_info Flag Parameter in D‑Link DI‑7001 MINI_5G | |
| Weaknesses | CWE-77 |
Mon, 24 Aug 2026 19:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | D-Link DI-7001 MINI_5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of msp_info, which can be exploited to run arbitrary commands. | |
| References |
|
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-08-24T18:46:53.581Z
Reserved: 2025-02-07T00:00:00.000Z
Link: CVE-2025-26237
No data.
Status : Received
Published: 2026-08-24T19:16:34.307
Modified: 2026-08-24T19:16:34.307
Link: CVE-2025-26237
No data.
OpenCVE Enrichment
Updated: 2026-08-24T21:00:12Z
-
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')