Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.4
CVE-2026-10206: D-Link DI-8400: Malicious code can be executed remotely
CVE-2026-10206 · published 5 months ago
Summary
A vulnerability in the D-Link DI-8400 allows hackers to execute malicious code on the device from anywhere. This can happen if the device's software is not updated to the latest version. It's recommended to update the device's software as soon as possible to prevent potential attacks.
Original advisory text
A vulnerability was detected in D-Link DI-8400 up to 16.07.26A1. This affects an unknown function of the file /dbsrv.asp. Performing a manipulation of the argument str results in stack-based buffer...
A vulnerability was detected in D-Link DI-8400 up to 16.07.26A1. This affects an unknown function of the file /dbsrv.asp. Performing a manipulation of the argument str results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used. The initial researcher advisory mentions contradicting parameter names to be affected.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-119Buffer Overflow
CWE-121Stack-based Buffer Overflow
Timeline
Published1 Jun 2026
Updated4 Nov 2026
First seen1 Jun 2026
Sources
CVE-2026-10206 · NVD
Track software like this
Free during beta