CVE-2025-26237: n/a
A code execution vulnerability exists in the D-Link DI-7001 MINI_5G firmware version 19.10.31A1. The flaw is in the 'flag' parameter of the msp_info component and allows an attacker to execute arbitrary commands. No patch or remediation information is currently available. There is no evidence of exploitation in the wild to date.
AI Analysis
Technical Summary
CVE-2025-26237 identifies a code execution vulnerability in the D-Link DI-7001 MINI_5G device firmware version 19.10.31A1. The vulnerability is triggered via the 'flag' parameter in the msp_info functionality, enabling arbitrary command execution. The CVE record does not provide a CVSS score or detailed technical exploitation data. No remediation or patch information has been published, and no known exploits have been reported in the wild.
Potential Impact
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the affected device, potentially leading to full compromise of the device. The exact impact depends on the attacker's privileges and the device's role in the network. No active exploitation has been reported.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor vendor communications for updates and consider limiting access to the affected device's management interfaces to trusted networks only.
CVE-2025-26237: n/a
Description
A code execution vulnerability exists in the D-Link DI-7001 MINI_5G firmware version 19.10.31A1. The flaw is in the 'flag' parameter of the msp_info component and allows an attacker to execute arbitrary commands. No patch or remediation information is currently available. There is no evidence of exploitation in the wild to date.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2025-26237 identifies a code execution vulnerability in the D-Link DI-7001 MINI_5G device firmware version 19.10.31A1. The vulnerability is triggered via the 'flag' parameter in the msp_info functionality, enabling arbitrary command execution. The CVE record does not provide a CVSS score or detailed technical exploitation data. No remediation or patch information has been published, and no known exploits have been reported in the wild.
Potential Impact
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the affected device, potentially leading to full compromise of the device. The exact impact depends on the attacker's privileges and the device's role in the network. No active exploitation has been reported.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor vendor communications for updates and consider limiting access to the affected device's management interfaces to trusted networks only.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mitre
- Date Reserved
- 2025-02-07T00:00:00.000Z
- Cvss Version
- null
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a8c92feacd9273b49fb81fc
Added to database: 08/24/2026, 18:52:46 UTC
Last enriched: 08/24/2026, 19:07:04 UTC
Last updated: 08/24/2026, 19:12:06 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.