Description
A security vulnerability has been detected in D-Link DI-8100 16.07.26A1. Affected by this vulnerability is the function url_rule_asp of the file /url_rule.asp of the component POST Parameter Handler. Such manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Severity
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:PCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:RCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:RAV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:URExploitation Context
as of October 28, 2026- Its current EPSS score (5.9%) is higher than that of 18% of CISA KEV entries.
Affected Products
| Vendor | Product | Affected versions |
|---|---|---|
| D-Link | D-Link DI-8100 | 16.07.26A1 |
References
5 LinksRecord Details
More from D-Link
D-Link Multiple Routers Command Injection Vulnerability
D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection
D-Link DNS-320 Device Command Injection Vulnerability
D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials
Related
Tool categories
CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Exploited-in-the-wild data from the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). Alert titles and links from CISA cybersecurity alerts. This site is not endorsed or certified by MITRE, NVD, CISA, or FIRST.