CVE-2026-7069: D-Link DIR-825 miniupnpd upnpsoap.c AddPortMapping buffer overflow
A security flaw has been discovered in D-Link DIR-825 up to 3.00b32. This impacts the function AddPortMapping of the file upnpsoap.c of the component miniupnpd. Performing a manipulation of the argument NewPortMappingDescription results in buffer overflow. The attack needs to be approached within the local network. The exploit has been released to the public and may be used for attacks. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7069?
CVE-2026-7069 is rated as a critical severity vulnerability due to the potential for arbitrary code execution.
How do I fix CVE-2026-7069?
To fix CVE-2026-7069, upgrade the D-Link DIR-825 firmware to version 3.00b33 or later.
What are the implications of CVE-2026-7069?
CVE-2026-7069 can allow an attacker to exploit the buffer overflow and execute arbitrary code on the affected device.
Which devices are affected by CVE-2026-7069?
CVE-2026-7069 affects D-Link DIR-825 routers running firmware versions up to 3.00b32.
Is CVE-2026-7069 remotely exploitable?
Yes, CVE-2026-7069 is remotely exploitable, allowing attackers to trigger the vulnerability over a network.