VULNERABILITY INTELLIGENCE

CVE-2026-7854

CVSS score9.8 CRITICAL

EPSS probability5.86%

CISA KEVNot currently listed

Published2026-05-05

Last modified2026-07-24

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A security vulnerability has been detected in D-Link DI-8100 16.07.26A1. Affected by this vulnerability is the function url_rule_asp of the file /url_rule.asp of the component POST Parameter Handler. Such manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

Weakness classification

cna@vuldb.com: CWE-119

Primary references

cna@vuldb.com — Exploit, Third Party Advisory
cna@vuldb.com — Third Party Advisory, VDB Entry
cna@vuldb.com — Third Party Advisory
cna@vuldb.com — Permissions Required, VDB Entry
cna@vuldb.com — Product