{"id":"CVE-2025-26237","aliases":["EUVD-2025-210768","GHSA-9p6g-3qxg-62hh"],"status":"published","title":"D-Link DI-7001 MINI_5G 19.10.31A1 contains a code execution vulnerability in the flag parameter...","description":"D-Link DI-7001 MINI_5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of msp_info, which can be exploited to run arbitrary commands.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.0033,"percentile":0.26407,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-77"],"published":"2026-08-24T00:00:00Z","modified":"2026-09-29T10:10:00Z","references":[{"url":"https://github.com/REYu6/iot/blob/main/CVE/dlink/DI_7001_MINI_5G.md/DI_7001_MINI_5G.md"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-26237"},{"url":"https://github.com/advisories/GHSA-9p6g-3qxg-62hh"}],"sources":{"cve":[{"id":"CVE-2025-26237","description":"D-Link DI-7001 MINI_5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of msp_info, which can be exploited to run arbitrary commands.","status":"published","published":"2026-08-24T00:00:00Z","modified":"2026-08-28T18:11:53.381Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:32:27.932735Z"}],"euvd":[{"id":"EUVD-2025-210768","description":"D-Link DI-7001 MINI_5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of msp_info, which can be exploited to run arbitrary commands.","status":"published","published":"2026-08-24T00:00:00Z","modified":"2026-08-28T18:11:53Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T18:01:22.759915Z"}],"ghsa":[{"id":"GHSA-9p6g-3qxg-62hh","title":"D-Link DI-7001 MINI_5G 19.10.31A1 contains a code execution vulnerability in the flag parameter...","description":"D-Link DI-7001 MINI_5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of msp_info, which can be exploited to run arbitrary commands.","status":"published","published":"2026-08-24T21:33:41Z","modified":"2026-08-28T21:30:51Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T15:11:07.541511Z"}],"nvd":[{"id":"CVE-2025-26237","description":"D-Link DI-7001 MINI_5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of msp_info, which can be exploited to run arbitrary commands.","status":"published","published":"2026-08-24T19:16:34.307Z","modified":"2026-09-29T10:10:00.263Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:12:03.20248Z"}]}}