D-Link Di-7001mini-8g Firmware vulnerabilities

4 CVEs affecting D-Link Di-7001mini-8g Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-10270, published 2026-06-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-11407, published 2025-10-07. Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days. A weakness has been identified in D-Link DI-7001 MINI 24.04.18B1. Impacted is an unknown function of the file /upgrade_filter.asp. This manipulation of the argument path causes os command injection.…
CVE-2025-12313, published 2025-10-27. Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days. A vulnerability has been found in D-Link DI-7001 MINI 19.09.19A1/24.04.18B1. The affected element is an unknown function of the file /msp_info.htm. Such manipulation of the argument cmd leads to…
CVE-2025-11408, published 2025-10-07. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. A security vulnerability has been detected in D-Link DI-7001 MINI 24.04.18B1. The affected element is an unknown function of the file /dbsrv.asp. Such manipulation of the argument str leads to buffer…
CVE-2026-10270, published 2026-06-01. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability was detected in D-Link DI-7001 MINI up to 19.09.19A1. Impacted is the function sprintf of the file /httpd_debug.asp of the component API. The manipulation of the argument Time results…