PT-2026-35228 · D Link · Dir-825

Tian · Published 2026-04-26 · Updated 2026-04-27 · CVE-2026-7068

Mitre

CVSS v3.1

8.8

High

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A vulnerability was identified in D-Link DIR-825 3.00b32. This affects the function NMBD process of the file sserver.c of the component nmbd. Such manipulation leads to buffer overflow. The attack can only be initiated within the local network. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

CVE-2026-7068

Affected Products

Dir-825

References · 7

• 🔥 https://tzh00203.notion.site/D-Link-DIR-825-nmbd-NetBIOS-Name-Service-Stack-Based-Buffer-Overflow-337b5c52018a80cea1e8d56689928114 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7068 · Security Note
• https://dlink.com · Note
• https://vuldb.com/vuln/359643 · Note
• https://vuldb.com/submit/798646 · Note
• https://twitter.com/vuldb/status/2048313433893064993 · Twitter Post
• https://vuldb.com/vuln/359643/cti · Note