CVE-2025-11407 | D-Link DI-7001 MINI 24.04.18B1 /upgrade_filter.asp path os command injection

October 7, 2025 Yanac

A vulnerability identified as critical has been detected in D-Link DI-7001 MINI 24.04.18B1. Impacted is an unknown function of the file /upgrade_filter.asp. This manipulation of the argument path causes os command injection.

This vulnerability appears as CVE-2025-11407. The attack may be initiated remotely. In addition, an exploit is available.VulDB Recent EntriesRead More