Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-7856: D-Link DI-8100 Web Interface Name Argument Manipulation

CVE-2026-7856 · published 6 months ago

Summary

A security flaw in the D-Link DI-8100's web interface can be exploited remotely, allowing an attacker to potentially take control of the device. This could lead to unauthorized access or other malicious activity. It's recommended to update the device to the latest available version to protect against this vulnerability.

Original advisory text

A flaw has been found in D-Link DI-8100 16.07.26A1. This affects an unknown part of the file /url_member.asp of the component Web Management Interface. Executing a manipulation of the argument Name can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.

References

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

7.3 High

Exploitation

5% chance of attack within 30 days

Type

CWE-119Buffer Overflow

CWE-120Classic Buffer Overflow

Timeline

Published5 May 2026

Updated26 Oct 2026

First seen5 May 2026

Sources

CVE-2026-7856 · NVD

Track software like this

Free during beta