CVE-2026-7854

Critical

Published: 05/05/2026(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A vulnerability has been detected in D-Link DI-8100 version 16.07.26A1, affecting the url_rule_asp function in the /url_rule.asp file of the POST Parameter Handler component. Manipulation of this function leads to buffer overflow.

Risk Assessment

An attacker can remotely exploit this vulnerability, posing a serious threat to system security. The public disclosure of the exploit increases the risk of attacks.

Recommendation

It is recommended to update the device to the latest firmware version to mitigate this vulnerability. Additionally, monitor network traffic for potential attack attempts.

Original NVD description (English source)

A security vulnerability has been detected in D-Link DI-8100 16.07.26A1. Affected by this vulnerability is the function url_rule_asp of the file /url_rule.asp of the component POST Parameter Handler. Such manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.