CVE-2025-11338

KRITISCH 9.8CVE-2025-11338 · Published 06/10/2025 · updated 09/10/2026

Kurz gesagt

CVE-2025-11338 ist eine Schwachstelle (KRITISCH (CVSS 9.8)).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.0%, höher als bei 63.4% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A flaw has been found in D-Link DI-7100G C1 up to 20250928. This vulnerability affects the function sub_4C0990 of the file /webchat/login.cgi of the component jhttpd. Executing manipulation of the argument openid can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be used.

References

vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory
dlink.com · Product
yuque.com/jh0ng/vmpda6/kggo2ngrcphzvwml · Permissions Required

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free