CVE-2026-101081: D-Link DI-8400 Web Administration Service menu_nat_more.asp menu_nat_more_asp stack-based overflow
A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menunatmoreasp of the file menunatmore.asp of the component Web Administration Service. The manipulation of the argument opt results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The vulnerable Web Administration Service can be attacked remotely by manipulating the opt argument. The supplied severity vector indicates that the attacker needs high privileges, while no user interaction is required.
Which deployment is known to be affected?
The affected product and version identified in the available data are D-Link DI-8400 16.07. The vulnerable endpoint is menu_nat_more.asp, specifically the menu_nat_more_asp function.
Is exploitation publicly available?
Yes. A public exploit has been released, and the vulnerability information states that it may be used in attacks.