CVE-2025-11408: D-Link Di-7001mini-8g Firmware

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

A security vulnerability has been detected in D-Link DI-7001 MINI 24.04.18B1. The affected element is an unknown function of the file /dbsrv.asp. Such manipulation of the argument str leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

Affected products

• D-Link Di-7001mini-8g Firmware: version 24.04.18b1 only

Published 2025-10-07. Last modified 2026-10-08.