CVE-2026-7856

HighCVSS 7.2

Published: 05/05/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

4.59%

91th percentile - higher than 91% of all known CVEs

Summary

A buffer overflow vulnerability in D-Link DI-8100 version 16.07.26A1 in the web management interface (file /url_member.asp) allows remote exploitation via the Name argument. An exploit has been published.

Risk Assessment

A remote attacker could cause device crashes or potentially execute arbitrary code, leading to full compromise of the router.

Recommendation

Update the D-Link DI-8100 firmware to the latest version or replace the device with a supported model.

Original NVD description (English source)

A flaw has been found in D-Link DI-8100 16.07.26A1. This affects an unknown part of the file /url_member.asp of the component Web Management Interface. Executing a manipulation of the argument Name can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.