Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
2.9

D-Link DGS-1100-08PD Web Interface Configuration File Exploit

CVE-2026-11555 · published 4 months ago
Summary

The D-Link DGS-1100-08PD's web interface has a flaw that could allow an attacker to gain unauthorized access. This could happen if someone manipulates a specific file on the device, but it's difficult for an attacker to do so. To protect your device, consider updating to the latest version or applying any available security patches.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
dlink dgs-1100-08pd_firmware 1.00.006
cpe:2.3:o:dlink:dgs-1100-08pd_firmware:1.00.006:*:*:*:*:*:*:*
Original advisory text
A vulnerability was identified in D-Link DGS-1100-08PD 1.00.006. This issue affects some unknown processing of the file /etc/boa.conf of the component Web Interface. Such manipulation leads to leas...
A vulnerability was identified in D-Link DGS-1100-08PD 1.00.006. This issue affects some unknown processing of the file /etc/boa.conf of the component Web Interface. Such manipulation leads to least privilege violation. The attack may be launched remotely. The attack requires a high level of complexity. The exploitability is assessed as difficult. The exploit is publicly available and might be used.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
2.9 Low
Exploitation
<1% chance of attack within 30 days
Type
CWE-266Incorrect Privilege Assignment
CWE-272Least Privilege Violation
Timeline
Published8 Jun 2026
Updated4 Nov 2026
First seen8 Jun 2026
Sources
CVE-2026-11555 · NVD
Track software like this
Free during beta