Home / Vulnerability Intelligence / CVE-2026-7857

CVE-2026-7857 - Vulnerability Analysis

HighCVSS: 7.2

Last Updated: May 6, 2026

D-Link DI-8100 - Buffer Overflow

Published: May 5, 2026Updated: May 6, 2026PoC AvailableRemote Exploitable

Overview

D-Link DI-8100 16.07.26A1 contains a buffer overflow caused by manipulation of sprintf in /user_group.asp CGI Handler, letting remote attackers cause memory corruption, exploit requires no special privileges.

Severity & Score

Severity: High

CVSS Score: 7.2

Impact

Remote attackers can cause memory corruption, potentially leading to remote code execution or system crash.

Mitigation

Update to the latest available version.

References

https://github.com/draw-ctf/report/blob/main/DI-8100/user_group_asp_overflow.md
https://vuldb.com/submit/807853
https://vuldb.com/vuln/361134
https://vuldb.com/vuln/361134/cti
https://www.dlink.com/

Related Resources

Vulnerability Intelligence Dashboard
Credential Scanner

Details

CVE ID: CVE-2026-7857
Severity: High
CVSS Score: 7.2
Type: buffer_overflow
Status: confirmed

CWE

CWE-119

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H