CVE-2026-7854 | A security vulnerability has been detected in D-Link DI-8100… | CVSS 9.8 CRITICAL

Description

A security vulnerability has been detected in D-Link DI-8100 16.07.26A1. Affected by this vulnerability is the function url_rule_asp of the file /url_rule.asp of the component POST Parameter Handler. Such manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

Metadata

CVE ID: CVE-2026-7854
State: PUBLISHED
Assigner: VulDB
Reserved: 2026-05-05 11:39 UTC
Published: 2026-05-05 18:15 UTC
Last updated: 2026-05-06 14:20 UTC
Primary CWE: CWE-120
Buffer Overflow
Vendor / Product: D-Link / DI-8100
Sources: cve.org · NVD

Severity & Metrics

9.8 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R

SSVC — CISA Coordinator

Exploitation: PoC
Automatable: yes
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
D-Link	DI-8100	—	16.07.26A1

Weakness (CWE)

CWE	Source	Description
CWE-119	cna	Memory Corruption
CWE-120	cna	Buffer Overflow

CVSS scores (4)

Score	Severity	Version	Source	Vector
10.0	N/D	2.0	cna	AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR
9.8	CRITICAL	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
9.8	CRITICAL	3.0	cna	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
9.3	CRITICAL	4.0	cna	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

References (5)

VDB-361131 | D-Link DI-8100 POST Parameter url_rule.asp url_rule_asp buffer overflow https://vuldb.com/vuln/361131
VDB-361131 | CTI Indicators (IOB, IOC, IOA) https://vuldb.com/vuln/361131/cti
Submit #807838 | D-Link DI-8100 16.07.26A1 Denial of Service https://vuldb.com/submit/807838
https://github.com/draw-ctf/report/blob/main/DI-8100/url_rule_asp_overflow.md
https://www.dlink.com/