CVE-2026-7857
HighCVSS 7.2Exploitation Probability (EPSS)
High risk90th percentile - higher than 90% of all known CVEs
Summary
A buffer overflow vulnerability in D-Link DI-8100 version 16.07.26A1 in the file /user_group.asp (CGI Handler) via the sprintf function allows remote exploitation. The exploit has been publicly disclosed.
Risk Assessment
A remote attacker could cause device crashes or potentially execute arbitrary code, leading to full compromise of the router.
Recommendation
Update the D-Link DI-8100 firmware to the latest version or replace the device with a supported model.
Other vulnerabilities in D-Link DI-8100
See all- CVE-2026-7856High
A buffer overflow vulnerability in D-Link DI-8100 version 16.07.26A1 in the web management interface (file /url_member.asp) allows remote exploitation via the Name argument. An exploit has been published.
- CVE-2026-7854Critical
A buffer overflow vulnerability in D-Link DI-8100 version 16.07.26A1 in the function url_rule_asp of the file /url_rule.asp (POST Parameter Handler) allows remote attackers to potentially execute arbitrary code. The exploit has been publicly disclosed.
- CVE-2026-7853Critical
A weakness has been identified in D-Link DI-8100 16.07.26A1. Affected is the function sprintf of the file /auto_reboot.asp. Manipulation of the argument enable/time causes buffer overflow. The attack can be initiated remotely. The exploit has been made public.
- CVE-2026-7855High
Vulnerability in D-Link DI-8100 router version 16.07.26A1. The tggl_asp function in /tggl.asp is vulnerable to buffer overflow via manipulation of the Name argument. The attack can be carried out remotely.
- CVE-2026-7851High
A vulnerability was found in D-Link DI-8100 version 16.07.26A1. The sprintf function in the yyxz.asp file is prone to a stack-based buffer overflow via the ID argument. The attack can be performed remotely and a public exploit exists.
Original NVD description (English source)
A vulnerability has been found in D-Link DI-8100 16.07.26A1. This vulnerability affects the function sprintf of the file /user_group.asp of the component CGI Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS