by Kastro
Paper/Archive/CVE-2026-7853

CVE-2026-7853

D-Link DI-8100 — D-Link DI-8100 HTTP auto_reboot.asp sprintf buffer overflow

EPSS 2%public exploitCVSS 9.8
critical.is priorityof 100
54
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 74.5.745 × 2014.9Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

A weakness has been identified in D-Link DI-8100 16.07.26A1. Affected is the function sprintf of the file /auto_reboot.asp of the component HTTP Handler. This manipulation of the argument enable/time causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.

Affected

ProductAffectedFixed inSource
DI-810016.07.26A1–CNA

Scores by source

VulDB (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
VulDB (CNA)9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
VulDB (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

writeupvuldb.com/vuln/361130refvuldb.com/vuln/361130/ctiwriteupvuldb.com/submit/807837exploitgithub.com/draw-ctf/report/blob/main/DI-8100/auto_reboot_asp_overflow.mdrefdlink.com