CVE-2026-7854
CriticalCVSS 9.8Exploitation Probability (EPSS)
Very high risk92th percentile - higher than 92% of all known CVEs
Summary
A buffer overflow vulnerability in D-Link DI-8100 version 16.07.26A1 in the function url_rule_asp of the file /url_rule.asp (POST Parameter Handler) allows remote attackers to potentially execute arbitrary code. The exploit has been publicly disclosed.
Risk Assessment
A remote attacker can trigger a buffer overflow, potentially leading to arbitrary code execution on the router and full compromise of the network device.
Recommendation
Immediately update the D-Link DI-8100 firmware to the latest available version or consider replacing the device if no patch is provided.
Original NVD description (English source)
A security vulnerability has been detected in D-Link DI-8100 16.07.26A1. Affected by this vulnerability is the function url_rule_asp of the file /url_rule.asp of the component POST Parameter Handler. Such manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.