CVE-2026-7854
🔴 Łataj teraz
Przepełnienie bufora w D-Link DI-8100 umożliwia zdalne wykonanie kodu.
CVSS
9.8
EPSS
5.9%
Exploit
poc
Vendor
dlink
Opis źródłowy (NVD)
A security vulnerability has been detected in D-Link DI-8100 16.07.26A1. Affected by this vulnerability is the function url_rule_asp of the file /url_rule.asp of the component POST Parameter Handler. Such manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
buffer-overflow exploit
Brak patcha
Źródła i daty
| Źródło | Wartość |
|---|---|
| NVD – CVSS | 9.8 |
| CISA KEV (aktywnie wykorzystywane) | Nie |
| FIRST EPSS (prawdopodobieństwo exploita) | 5.9% |
| Opublikowano (NVD) | 2026-05-05 19:16:23 UTC |
| Ostatnia modyfikacja (NVD) | 2026-07-24 08:10:00 UTC |
Referencje
- https://github.com/draw-ctf/report/blob/main/DI-8100/url_rule_asp_overflow.md (cna@vuldb.com) [Exploit, Third Party Advisory]
- https://vuldb.com/submit/807838 (cna@vuldb.com) [Third Party Advisory, VDB Entry]
- https://vuldb.com/vuln/361131 (cna@vuldb.com) [Third Party Advisory]
- https://vuldb.com/vuln/361131/cti (cna@vuldb.com) [Permissions Required, VDB Entry]
- https://www.dlink.com/ (cna@vuldb.com) [Product]