Dashboard / CVE-2026-7068

CVE-2026-7068

HIGH
MEDIUM Priority: 0.14 BB Relevance: 60/100
Published: 2026-04-27 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Adjacent Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: None
UI: None
S: X
AT: None
VC: High
VI: High
VA: High

Description

A vulnerability was identified in D-Link DIR-825 3.00b32. This affects the function NMBD_process of the file sserver.c of the component nmbd. Such manipulation leads to buffer overflow. The attack can only be initiated within the local network. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.

Weakness Classification (2)

Affected Software (1)

VendorProductVersion
dlink dir-825_firmware 3.00b32

References & Advisories (5)

https://vuldb.com/submit/798646
Third Party Advisory VDB Entry
https://vuldb.com/vuln/359643
Third Party Advisory VDB Entry
https://vuldb.com/vuln/359643/cti
Permissions Required VDB Entry

Bug Bounty Relevance

60 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

7.4 / 10.0 v4.0
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

1.87%
Raw Score 0.018710
Percentile 79.3%
Date 2026-10-29

EPSS Trend

2026-10-29
0.01871
2026-10-28
0.01871

Intelligence Sources

nvd ref →

External Links