CVE-2026-7851 - Vulnerability Analysis

Overview

D-Link DI-8100 16.07.26A1 contains a stack-based buffer overflow caused by manipulation of the "ID" argument in yyxz.asp's sprintf function, letting remote attackers execute arbitrary code, exploit requires crafted request.

Severity & Score

Impact

Remote attackers can execute arbitrary code, potentially leading to full system compromise.

Mitigation

Update to the latest version or apply vendor patches.

References

• https://vuldb.com/vuln/361128
• https://vuldb.com/vuln/361128/cti
• https://www.dlink.com/
• https://github.com/draw-ctf/report/blob/main/DI-8100/yyxz_dlink_asp_overflow.md
• https://vuldb.com/submit/807798

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner