CVE-2026-11555

LowCVSS 3.7

Published: 08/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.41%

33th percentile - higher than 33% of all known CVEs

Summary

In D-Link DGS-1100-08PD version 1.00.006, the Web Interface component's /etc/boa.conf file has a least privilege violation.

Risk Assessment

A remote attacker can gain unauthorized privileges, potentially leading to full device compromise.

Recommendation

Apply the available patch or update the device firmware.

Original NVD description (English source)

A vulnerability was identified in D-Link DGS-1100-08PD 1.00.006. This issue affects some unknown processing of the file /etc/boa.conf of the component Web Interface. Such manipulation leads to least privilege violation. The attack may be launched remotely. The attack requires a high level of complexity. The exploitability is assessed as difficult. The exploit is publicly available and might be used.