Exploitation ongoing with high activity in latest observed window (5 mentions)
Recommended action window: Immediate (within 24h)
NVD description
A security flaw has been discovered in D-Link DIR-825 up to 3.00b32. This impacts the function AddPortMapping of the file upnpsoap.c of the component miniupnpd. Performing a manipulation of the argument NewPortMappingDescription results in buffer overflow. The attack needs to be approached within the local network. The exploit has been released to the public and may be used for attacks. This vulnerability only affects products that are no longer supported by the maintainer.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-04-26 | 1 | General1 |
| 2026-04-27 | 5 | Active Exploitation1Disclosure4 |
The severity is increased for this new vulnerability affecting D-Link DIR-825 (CVE-2026-7069) https://vuldb.com/vuln/359644
Post summary
The post notes an increased severity for a new CVE in a D‑Link router but provides no PoC, exploit, patch, or technical details.
🌐 CVE-2026-7069 — D-Link DIR-825 up to 3.00b32 is affected by a buffer overflow in upnpsoap.c, where AddPortMapping mishandles NewPortMappingDescription inside miniupnpd. Because the attack works from the local network, internal exposure still matters for shared or hostile LAN environments. https://nvd.nist.gov/vuln/detail/CVE-2026-7069
Post summary
The text announces a buffer overflow vulnerability in D-Link DIR‑825 routers (up to firmware 3.00b32), noting the risk originates from the local network.
CVE-2026-7069 A security flaw has been discovered in D-Link DIR-825 up to 3.00b32. This impacts the function AddPortMapping of the file upnpsoap.c of the component miniupnpd. Perform… https://www.cve.org/CVERecord?id=CVE-2026-7069
Post summary
The text announces a newly discovered flaw in D‑Link DIR‑825 routers affecting the AddPortMapping function of miniupnpd, but offers no evidence of exploitation, proof‑of‑concepts, or available fixes.
⚡ New CVE Alert: CVE-2026-7069 📊 Severity: 8.0 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-7069 #CVE-2026-7069 #CVE #High #CyberSecurity #InfoSec https://t.co/DqM1bEMzQI
Post summary
The tweet simply announces CVE‑2026‑7069 as a high‑severity vulnerability, linking to its NVD record, without detailing exploits, patches, or active incidents.
D-Link DIR-825 CVE-2026-7069 is under active exploitation—attackers can execute arbitrary code via buffer overflow in AddPortMapping. This affects millions globally. Patch now. #NerdieNews #CyberSecurity #InfoSec #ThreatIntel #APT #Cisco https://t.co/ohFVkNAHBm
Post summary
CVE-2026-7069 is actively exploited to achieve remote code execution on D‑Link DIR‑825 routers via a buffer overflow in AddPortMapping, and a vendor patch is available.
CVE-2026-7069 Buffer Overflow in D-Link DIR-825 miniupnpd AddPortMapping Function Up to 3.00b32 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7069
Post summary
The entry reports a buffer overflow vulnerability in D‑Link DIR‑825 miniupnpd up to firmware 3.00b32, with no PoC, exploit, patch, or evidence of active exploitation.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | dir-825 | - | - | - |
| OS | dlink | dir-825_firmware | 3.00b32 | - | - |