CVE-2026-10270-nvd.nist.gov-Awaiting Analysis

A vulnerability was detected in D-Link DI-7001 MINI up to 19.09.19A1. Impacted is the function sprintf of the file /httpd_debug.asp of the component API. The ma…

Published:

31 May 2026 at 22:00:00

Alert date:

1 June 2026 at 18:04:01

Source:

nvd.nist.gov

Mobile & IoT, Network Infrastructure

A stack-based buffer overflow vulnerability was discovered in D-Link DI-7001 MINI devices up to firmware version 19.09.19A1. The vulnerability affects the sprintf function in the /httpd_debug.asp file of the API component. An attacker can exploit this remotely by manipulating the Time argument parameter. The exploit code has been publicly released, making this vulnerability particularly dangerous. This affects the device's web interface debugging functionality and could allow remote code execution.

Technical details

Mitigation steps:

Affected products:

D-Link DI-7001 MINI