CVE-2026-7853

KRITISCH 9.8CVE-2026-7853 · Published 05/05/2026 · updated 24/07/2026

Kurz gesagt

CVE-2026-7853 ist eine Schwachstelle (KRITISCH (CVSS 9.8)).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.5%, höher als bei 74.5% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A weakness has been identified in D-Link DI-8100 16.07.26A1. Affected is the function sprintf of the file /auto_reboot.asp of the component HTTP Handler. This manipulation of the argument enable/time causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.

References

draw-ctf/report · Exploit
vuldb.com/submit/807837 · Third Party Advisory
vuldb.com/vuln/361130 · Third Party Advisory
vuldb.com/vuln/361130/cti · Permissions Required
dlink.com · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free