PatchSiren

PatchSiren cyber security CVE debrief

CVE-2025-26237 D‑Link CVE debrief

A high-severity vulnerability exists in the D-Link DI-7001 MINI_5G 19.10.31A1 device. The flag parameter of the msp_info function is susceptible to a code execution vulnerability, potentially allowing an attacker to run arbitrary commands. This issue has been assigned a CVSS score of 8.1 and is considered HIGH severity. The vulnerability could allow attackers to execute arbitrary commands on vulnerable devices, emphasizing the need for defenders to verify vulnerability status, assess exposure, and monitor for patches. This includes IT and network security teams managing these devices, as well as incident response teams preparing for potential exploitation. The CVE and NVD records,

Vendor
D‑Link
Product
DI-7001 MINI_5G
CVSS
HIGH 8.1
CISA KEV
Not listed in stored evidence
Original CVE published
2026-08-24
Original CVE updated
2026-09-29
Advisory published
2026-08-24
Advisory updated
2026-09-29

Who should care

Defenders responsible for D-Link DI-7001 MINI_5G devices should assess exposure and prioritize verification of vulnerability status. This includes IT and network security teams managing these devices, as well as incident response teams preparing for potential exploitation.

Why it matters

CVE-2025-26237 is a high-severity code execution vulnerability in D-Link DI-7001 MINI_5G devices. Defenders should prioritize verifying vulnerability status, assessing exposure, and monitoring for patches due to the potential for attackers to execute arbitrary commands.

  • Potential for attackers to execute arbitrary commands on vulnerable devices
  • Need for defenders to verify vulnerability status and assess exposure
  • Priority on monitoring for official patches or mitigations from D-Link
  • Importance of inventory checks for affected devices

Technical summary

The D-Link DI-7001 MINI_5G 19.10.31A1 device contains a code execution vulnerability in the flag parameter of the msp_info function. This vulnerability can be exploited to run arbitrary commands. The CVSS score for this vulnerability is 8.1, indicating high severity.

Defensive priority

Defenders should prioritize verifying the vulnerability status of D-Link DI-7001 MINI_5G devices and assessing exposure, as the CVE details a code execution vulnerability that could allow an attacker to run arbitrary commands.

Recommended defensive actions

  • Verify the vulnerability status of D-Link DI-7001 MINI_5G devices in your inventory
  • Assess exposure and potential impact on your systems
  • Monitor for any official patches or mitigations from D-Link

Evidence notes

The CVE and NVD records provide details on the vulnerability, including its CVSS score and vector. A source reference from GitHub provides additional information on the vulnerability.

Sources and references

Verified primary and authoritative sources

  • CVE-2025-26237 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2025-26237

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2025-26237 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2025-26237

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.